last executing test programs: 7m6.903511771s ago: executing program 3 (id=282): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0xd, 0x9, {{0x6, 0x4, 0x3, 0xf, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9feb, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0xa, 0x29, &(0x7f0000000680)=""/41, 0x41100, 0x8, '\x00', r4, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x4, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000840)=[{0x0, 0x4, 0xa, 0x1}, {0x1, 0x4, 0xa}, {0x3, 0x4, 0x0, 0xa}, {0x4, 0x3, 0x1, 0x4}, {0x1, 0x3, 0x1, 0xa}], 0x10, 0x7645}, 0x94) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0xcc, 0x7, 0x201, 0x0, 0x3, 0x0, 0xff, 0x6, r5}, 0x20) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x15}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004891}, 0x801) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async, rerun: 64) r11 = socket$inet(0x2, 0x3, 0x2) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r12, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x19, 0x6, @l2={'ib', 0x3a, 'wg2\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x94) 7m6.595470551s ago: executing program 3 (id=284): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/38, &(0x7f0000000100)=0xfffffffffffffed5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}], 0x1, 0x24044088) write$bt_hci(r2, &(0x7f0000000080)={0x1, @create_conn_cancel={{0x408, 0x6}}}, 0xa) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/38, &(0x7f0000000100)=0xfffffffffffffed5) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}], 0x1, 0x24044088) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @create_conn_cancel={{0x408, 0x6}}}, 0xa) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 7m6.392961477s ago: executing program 3 (id=285): socket$rds(0x15, 0x5, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x40010142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 7m6.051427066s ago: executing program 3 (id=286): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r0, 0x607d8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x712, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'ghash\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x88) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x38000000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7010fcdbdf25250000000a8001007770616e3100000005002e00d200000005002b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4049}, 0x4c080) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc001) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r11, 0x10c, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="81d56f82581f0ca7005eb40988f3ce2636606ec32ca2cf8a79c8b3b66b6e610bdcd362846ff687b651884fb67cba8ef9f6695064e40de1578bcc9305fa9b04002fba17f8a501dbc00567de648181eaad5033686c348d4acfbde22515e515a28a3a1685c173a0494ccc1eedd40b6ed435afa7c242614b33bfdbe6be2ccf623deb11ee58cb8a93da6a4c3cad23ad229fe88232b35823e1cf41ced3e53a8e8e9b027a7f7efc1bdc9904b87b5d20d4b885cec1915d0f", @ANYRES16=r9], 0x48) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r8) 7m5.085661256s ago: executing program 3 (id=288): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000040)=""/197, 0x41000}, 0x94) r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000001e40)=0x9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x777}]}}}]}, 0x40}}, 0x240080c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0xb}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0x24c, 0x31, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcc}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0001}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff0}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x7, 0x3, 0xfffffffe}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffeae, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3a515f7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c05}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0}}}}) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="6928740d24cc263195823b9237e223b4fa57932664c0f89438aac1573b2ec632be03e09dbe725fcfffece3ab2b0453ea602f352a30d6863f66ab53d7d60badbe5268247858d33ae7ea76778d9ed16cd97fd730b245dc"], 0x6) 7m4.723157008s ago: executing program 3 (id=293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0xfffffffffffffece, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x600}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @generic={0x6, 0x6, 0xa, 0xbd7, 0x5}], &(0x7f0000000300)='syzkaller\x00', 0xa5b, 0x0, 0x0, 0x1f00, 0x1a, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xfffffff8, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r8, r9], &(0x7f0000000540)=[{0x4, 0x5, 0xb, 0x1}], 0x10, 0x7f}, 0x94) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 6m49.70272941s ago: executing program 32 (id=293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0xfffffffffffffece, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x600}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @generic={0x6, 0x6, 0xa, 0xbd7, 0x5}], &(0x7f0000000300)='syzkaller\x00', 0xa5b, 0x0, 0x0, 0x1f00, 0x1a, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xfffffff8, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r8, r9], &(0x7f0000000540)=[{0x4, 0x5, 0xb, 0x1}], 0x10, 0x7f}, 0x94) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 2m50.934396721s ago: executing program 4 (id=2097): unshare(0x50a00) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="500000000000060000000000000095000100"/32], 0x0, 0xe, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x1}, 0x10}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80d}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000880)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="aa7eae9d43d67cba519c286242bfce53887e8479c5fca4d7e489c121d1ec386e95ff000000000ae9cef9532862e43d4ff36b80385a202e22a6732d09a5145d701491a780bd2fcc05ca50543d8e3558c2a6ac5244d2d88f51e480f61e3ba560ab5266ee4e00089f57409a1be2f910a1c23cf0b1fe97deedd0d58f1e524c864d4fe9371eeef082926ed91ca863f226aeba071c211d5b943debeeae3844f31fa8a472c2c7c62fe65d0000e96fac72d45030de1d936991fe41acd427d5035dbbadc5ff84b4727f39189c1259b3db487ddc3a3635a5281d17", @ANYRES64=r1, @ANYRESDEC=r2], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000280)="05154ca8eb3d61a2751cbae57bea0488c1d11c4d2e37681992c7d3b99199d2213da1de1f081ccf9fba0a34d9edcd2aa33433fc9efd05b8b6a2ee3cabc1d24bfb5b90f89621710f4ec370ddf7a71d0d8584375b638fda96f7a760689975846699e7032bda6c1cbe8b9bb147b5417d69e898b665decf79161687ab7b96aca330b6245b51d694b0299af2971242f9e826726cb1d4", 0x93, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newtclass={0x34, 0x28, 0x100, 0x70bd29, 0xfffffff8, {0x0, 0x0, 0x0, r11, {0xc, 0x6}, {0xffe3, 0x3}, {0xd, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_RATE={0x6, 0x5, {0x81, 0xf8}}]}, 0x34}}, 0x4000) 2m45.983381624s ago: executing program 4 (id=2128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x20000400) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f00000006c0)="cb4c", 0x2}], 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000071106800000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00'}, 0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x12d5c, 0x1}}, 0x44) recvfrom(r1, &(0x7f0000000100)=""/41, 0x29, 0x2000, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xa05, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0x2}}}, 0x80) 2m45.72569129s ago: executing program 4 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x24044020}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r1, &(0x7f0000000800), 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x612b3daa98fb14ac, 0x20000027, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0xe9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='tegra_dma_tx_status\x00', r4, 0x0, 0x10000000}, 0x18) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto$llc(r5, &(0x7f0000000180)="0800b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2m41.50358753s ago: executing program 0 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0xfb, 0xc6, 0x1, 0x18, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x7f, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff41, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x32, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0x20008840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x80, 0x7800, 0x9, 0x4, {{0x16, 0x4, 0x2, 0x2b, 0x58, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0x41, [@remote, @broadcast, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2]}, @timestamp={0x44, 0x1c, 0x57, 0x0, 0x1, [0xfffffff9, 0xffffff01, 0x6, 0x1, 0x2, 0x40]}]}}}}}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@private0, 0x0}, &(0x7f0000000600)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffef7}}, @TCA_STAB={0x9a83c187102aa54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x124, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x124}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r15, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m41.238357208s ago: executing program 0 (id=2154): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newsa={0x15c, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@broadcast, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x8, 0x6, 0xffff, 0x1a, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xbb}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @lifetime_val={0x24, 0x9, {0x80, 0x5, 0x8000000000000001, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) accept4(r2, 0x0, 0x0, 0x800) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x40548c0}], 0x1, 0x4000859) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYRESOCT=r4, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="132a9a273c35bfb0c63aefa3a8f835dbfea0e23f95aaa6787180a891ad7287bb8a199e58f1e3b8ea234429162403594f18420d23aaef8d9eb02c4879a6613fbd3b767f64c7558e05034917e83a1f965b3d0509d681822ef9c2d924489341cc980d022c74f094e5a7c5334d076288c01dde8a1be608f9a2924cee679983ee944108ff800963519c26752f1413a6bad74c9c3f1d405f4f3d6fa1a8b61a1e0beff685243d22cb82e4e05645b2c07e0e14df03bc4bb22b790ac990174d291d716a6920c750211875bc3ee3b8f9e3d71e0c945eb1e94a38517b44635149787fc9bc3c2198d726e7a05ca0fd"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x44080) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x20004000}, 0x24040840) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x20004000}, 0x24040840) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x20, r11, 0x6a98047402e98331, 0x0, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x440d0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x4, 0x0, 0x1, 0x0, '\x00', r13}, 0x50) ioctl$TUNSETLINK(r9, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x306) 2m40.93645207s ago: executing program 4 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20000010) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 2m40.930629481s ago: executing program 0 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="c2", 0x1}], 0x1}, 0x20000000) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000fe0000000700020000100000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 2m40.583399795s ago: executing program 0 (id=2161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x780, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0xffff, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) unshare(0x6020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7}, 0x90) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000001340)={0x0, r6}, 0x8) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x14, r10, 0x21, 0x8d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000001280)}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=@newtaction={0xd8, 0x30, 0x51b, 0x0, 0x25dfdbfd, {}, [{0xc4, 0x1, [@m_mirred={0xc0, 0x1a, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1f6, 0xffffffffffffffff, 0x0, 0xfffff327}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x2, 0x1, 0x23}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x81, 0x2, {{0x8b99, 0x2, 0xffffffffffffffff, 0x4, 0x8}, 0x3, r3}}]}, {0x34, 0x6, "6fb24d488e8ea8b61fc929120a4d8623590099d0b88c06ff9a0d9b5ae7d28e6aa77ddc6e399ff794a1a17e383aa251f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) accept$ax25(r8, &(0x7f00000011c0)={{0x3, @rose}, [@bcast, @default, @bcast, @remote, @rose, @bcast, @null, @null]}, &(0x7f0000000040)=0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000d0000000a6c000000060a0904000000000000000002000002400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0xf7dc9000) 2m40.331591298s ago: executing program 4 (id=2165): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000c0001000900"/32], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast1}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/36, 0x24}, 0x56000000}, {{&(0x7f0000000700)=@xdp, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000780)=""/18, 0x12}, {&(0x7f0000000380)=""/210, 0xd2}, {0x0}, {&(0x7f0000000a00)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/134, 0x86}, {&(0x7f0000001c80)=""/193, 0xc1}], 0x6, &(0x7f0000001e00)=""/157, 0x9d}, 0x6}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001ec0)=""/241, 0xf1}, {&(0x7f0000001fc0)=""/204, 0xcc}, {&(0x7f0000002180)=""/103, 0x67}, {&(0x7f0000002200)=""/157, 0x9d}, {&(0x7f0000002380)=""/142, 0x8e}], 0x5, &(0x7f00000024c0)=""/178, 0xb2}}, {{0x0, 0x0, &(0x7f0000002a00)=[{0x0}, {&(0x7f00000026c0)=""/251, 0xfb}, {&(0x7f00000027c0)=""/158, 0x9e}, {&(0x7f0000002880)=""/78, 0x4e}, {&(0x7f0000002900)=""/114, 0x72}, {&(0x7f0000002980)=""/92, 0x5c}], 0x6}, 0xd}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000002b00)=""/4096, 0x1000}], 0x1}, 0x3800000}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003b00)=""/199, 0xc7}, {&(0x7f0000003c00)=""/205, 0xcd}, {&(0x7f0000003d00)=""/22, 0x16}, {&(0x7f0000003d40)=""/32, 0x20}], 0x4}}], 0x6, 0x10002, 0x0) r3 = socket(0xa, 0x3, 0xff) r4 = socket$can_raw(0x1d, 0x3, 0x1) shutdown(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c104000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007000)=ANY=[@ANYBLOB="c4200000400007012bbd700000000000017c00000400c2800c0001800800108004000380a02002800ab23cf69083a05c2a61d4a9bbb1a36246502ac10d7cc50bc3a7a117aa47db77723f901f9dff31ade18572ec059468f47f0b6c6c89985ff253beb65733ec7e7c8f8557536d0271417588f9255ebd6b9529f1bef91d1608068d0019fd4781944157c870ad9ddddf730de03dcc128f8834cd42bd9e486ffbd9746b543c9751d92219ebfb3d9a9837e3855b944e2be35583eb0865256f0a308198b352f8770b8c38c19b08513c21e6177d5cfe8782093af8d9c0f2de11c7d750d589782dc57ca68416feb02b0317e9e7c77b571716c4e6cc0c145e6efb9e924dd6df5e8d2ca3286c6d64b875749f944d77bbe1ad692c940fece75e1fdaaac6880cf3c002bdb2ffaf145f01755e61ef163433640c073b254dd9e22f2b2adca25199866b0e5231088e9cf1335f2f1456c5b97a76e0de69fe82ed0229f8676e3b6a1aab718dbaa9b83d57af3a7914d5ed7a0b3e70e93c7782c6dacc2ddc43452427a8a80a18969594a1b411d78af6245b6d28b9ba660b337ffb0e6b137ec40f6f4bce5cf60bdf4d96c0a9f757043a83ec54a46cee8dcb74877698909cc45f4d36f0265d23c2f02786baaa6b7c13eadd59d378bbc0c60e1933bf7d8cdce631caf6e45d73cfc489dc9458223073ad3ea4da39747259fd2f4d16addd20dff9515c1176643f2fa8c1e13a8d8007c084f6c3b5dd5c4bd210f0a3ed5a0625ddcc2518d88dc089e662c9afc9e3b857fe0549168aef0621e8da2bcf4956b4d3c18fdf871469920833da88c5776722448ed510d4fd7a4bde19d4bc8c7b40e3574cbfb69554fcb6f9d38af2614ce3ad0d5db40f6209a5339fffa6e03096f048f69ce2e88643d421af4942a8b7268c7817c2be5fe3a14f887d51c6c939f8daf2ded2e507bb2f1e15c9d164ade7abf13a9e8ab17df6bd51d14049fba0474215cb1664e09d997640135bc4217949f017fbefe409c6d08eac791f8382805bbcb0ac68659a2af3e3e7d491b80847a35a8a88ed3a7ac4103d03c59b40e1531110629ae0cfbc1c397d4fa5c9aff14e096f3099d95d7991884096d2f88d5b8b17642595e62d308e26444d91af444a1b7ddbaef50e7619ed0b2f55eabf10686b03a7a3a3aa3510cd216760797f4ead57d253605564fec5a6c96fdbe4e9204a9e6e91837c80b28a73a321d45aa96b4677e4f9e8a59cccc05e4ae3ccb898a73db7867139cb0c2c375ed5eb1599f3a2bc58dfdfaa504a6bfb43d79d770885bc517dcd04ff6ea743ed9b02343ad5f48ba3f8d1c794cc263d01fa5e81e9998baaafceab6999f46497f220b961d7fc43cd03a4588599c4068f78b68b14817e83440198fc10cbe329cc274eebf737548437191814fd70c184f35bbe86610ca18ef7c43cc79e68f59c6cff89335c0c60bba61f2fe9d1ba59f2e5093f098d22bc93567a65d57f08c0359dbcc7c87967f4f6bb7d8212d20e9112f9180de8fabc09517553634e3d593bd2f5a7e4e3f08dc9b9839944005ccad3165773b4a75adbd3d37c7efa6e803181355d4f21b73fd31b1492e12bd9fb128b3d04a94d29817d1f2dba5ce9643fff0e8268f2d937d8a3559efa70ec81692991c912764de9c5f23681cecd8ba236947e11d94b8358412f803c5f4416f4342643fd7d54c1987d8018eec847307312abec18e5f4974e5a38e26d169c101b8f17a65119a655295f9477fce9ae333b48cd8f61e878fff9603531c8c5ecb8bf8888e2a6e72c0af03b80b4a64a015210eff04f936afa17eea476d572f3a4abe8b9d907804deaf547852d4caab7466671fe9dd0bdd282a3b54aa07d81b5d0c456ed7af8a53f648d5574f38678793bd93fc27e77f6ad240cf1cfce4ec15abcf6bed8c546764db9b822e7b528099ad6ab5563f7aaa3d273ad32f700a482c4ca876a9e190adeafefd8624e12cca86f1df990ff91f8b96d93cf9277132d6477d5d9c513350e849c55fe088dc2626507667493240dd3c7dadf97b4493f71852f269fdf038cf97cd68014f2342619a086feb3a878b0a7f688f1f8e26cd72a8434402c295cb747b9d9443e7a1b13d08aaacd2382555a24d389777c403ff98819b8428e13e69917fb5d2c4f9c7168baed1943b9bdbef7302693822e3f2a10743f4942d31aa5bc168c95645999d83e018022c1501582ad3e9e726ea3561e81701aae5c9fec0bc3a45f36890db737c824c1824dccd421d0a3c4cc8e50848cc977be91914fd6b083036a526baa6dfd705d458597839527ce62b275d7ed142e4871cf28c9c07d0fbce98fac127d3b54b393fbfd29a007735f4fa89b76b752c943088726f22fcb9f90a4f2d17b7bc94f8065a2b7db24161e4f07032c8139ee96567be6ff4b67d05df8232a3a8e86f2901c12ed032a94201084c256ccf83853c64f3bab82b2d8aebb04eeab9fd51b7a608c05e4e01ea56b296a3aafabb27b171e70b1cbfa974e8dabe6243649d6614133767a57e743e5c5a864aaf146e18591ccf1a51a323038eee402f4ad7a551bacc043ff3d877ab5e5c691d4fb812db2b4d1baac171c33dde02d28ff5744c79703eb957d5ac8e297e8b99b258cd835826dec6891eaad3b0d545d04778bf1d77e8b05416fc2c0e4a23fc7ff176d65695a4fe3d3e251ea317f3d6e2e4eb09c6a1e72427bf229168f3bbe1bdf7abc1250c8c7dcd13449cbc2808d826b048e0c29cb2c4550bb81c20032f24917875116de6c4a989d42bf5fad99fddc64c654bde5a321a3bf5f16bcaba1cac7089bf69ee8c17ef2349fd6b88b9432391a637146a55b866692f8aac87b43d740b3bd5b3f6f68928d8df07cb9bae3b8a037efd605a9bb08d981d6b8316e2b739a7fadfe15e18bab81a4fbaa7e8722e851a1e181715ad4b9b7e5922b19e5d9b09f8bf97c9f72388883eac7347db3a3129d0d4aae40bfa8cec7a24557e540b5323b51fc88cfc108d7fc74af369c57f67d81d19683b927d2f4d6a756ab2d66f9cb4c8d2a0b0d2017a89b7a80b90493ff47fbdd8cadd1be02328ee55304133a4601eaadccc01e40c13cf4b295a185b67b4682bf3fb0451f07ff900093b7969897a25e252fd01c5cad58f5bd0f4d1312d6e2754c81d9bdc14b6abbf5e3c857e342c0cb3f173b2caaf9d269158f88df7c28b086b19848081c23153186309d005892079188c2fee7fdf824ca6e191f9df846e268e4a68fd7ba38b713f230a757ded10108a83b1c573e97525e5567d604993f886bbeaae88d9cd31bc89391ffd412a7336c13f8ae79a9ae9a09f39015def29494b58d379852baec981488cea852221fcd7cd7bdf661bbd6c73f786d3fee34cd61185f87465f30033b4d77cb9679811c9ee22cc2dd643fb99ee57bc289db6655ddcd403aa56028ccd7ec9bb70833ba79c5d9cfd90dda8473d4ed3afd7037f01b732aea041187b643acd2720d5e831c9f35e1a84c18e6c88df46822eb40f3a4edf4a6d6b121a89be7b399657fcf32b5519de28dbae74317102e3d9d47cdf9d620b1ee19f0b3a64a1d3b4d5c3ea6171b3b4490016daa98d0e3ffe765cffb5f80e614739617cf27b32a3d7586f0dc1fd0ea90f9f035bd6d4405d05555b18f55f1dbad66cefdf801fb603b12be6b2482a563079107b449d04e1ac650686a498a6945e04ecf843e53d430152c019e599121c9d54772e97608ba4c79260505886235dbc0046baec29f1cc4b04815319fae19a768e0c65e9c27eadc84df4921491d9c696d3fc3ad343838f8718378a7dc6fb417f469c6bdd91898b050c1b3d035bcd7cc17d3247e19cd83523a763291e2b1ed2256c52673d3d28f8e3f2081a8a9b5799a2006782c0540b8bc649cbfcd18a7ec6f3981d1e1be41bf44832d1a1e836331fd4c7b6e3a8ba6464a9e1391a25a0840d80b5ebbd90ef4678711eee3fdc35c9361be03d0b2b2caa0d074007a1d6693f723453aa266342bd50b1ffa84d303eef6b260dd7bcaf37eb8aec0c6381e087297b1a6ed7d0a29a3fbcdc950a1464ba0ab56eab82950bd65f3644b4c80056ba21d71d76911ce6c3c4bf9fa8345213b51d70432b9ed02c0314072606b56ad5d663337e46840880601376f2206afec3538eea213268aaeec38fb06a5187048f55cc4d0d581377127dee7d30264148d85ce0448cc82a05f0f930531c5d9905b2258dba449ef901bdfd5a44a91b3e47280167e4e3bb64c6cd204d5cadbb6ec17222bd1187c4dc9569144f957a2df5e48a97ffcca3d79bc7741e70e97301fe522513edcf7d71c547b150f191a38d91002da4a23b403f562cc61c537145983fb4181e0fbc843674fe8987a57943896ebbb100a80ebca1bebc40ecf1389a5847a5405b93f9394ed97630d0a8fe7ec5e0d0617df9249a0c0dd31b173c0361b258f475e66dcefe6eb25d3e88e48f34cb11b7c65eb8931e46d80e0f61f66896f807321400b3c68fd22efaa6f043611c8b61de6024e42e19db265388901617381e171d36edb9cf5341bdbd37f3b52c1570d82bad25ea2a41ea50676c5fc0ffcff04026d1fa698d9903f6b1767cae07e57cbde18be58349ba9b49d53bbfc995493a7e4842199bde72f0215e994bde15aa925d73634bf943f5740fafd8fca3d6bdb1a863ab75e96f1340437968fda985e58e3ef1bde290bf4cbfc9a6e49996254916a6af3b3c86d7a792968369ff0537734da2ca5f7fb7b1ccfbc9355285137bb30f7630462fd79b96d9bfdaa06ce1396b7bfa3feb737b68c0f0328230a54552dfb7e01680f58b89ea85b99ec2518fad225fe2352a4f1c89af2b69dd89e885ebdf3c6ce820f5c0ecf6c87d4b50ccc2b8684f354771036be9d4679ede22928b3f7d800d426589a00e8cf1bbd8fdc84cf2bc42227bd74193186ae5d6b9939739f9e0ed712ed5df0cf790e2f7372b210f60a8045253ebff6aaca927e412b48a83d40eaae783c7ff18f1804e93da354f26bbc5b42941abd0f3cd10eb9b101218fc386721a6dcd92f88f6ac08fb122dc769d40cfefa80b08bba66373d5644729940b5e38e83f1174bace54e35b177943ede3f40775ddea093216a930c6963b3b75bb2f2e20f14ed0c913f8699813249a22a8d99b8f400c835fc8b73329133f92146543b69de2f53c942f8ea8647f3e33246e8d060c81dcb3320cbb930b28fbb15d2d53562140a5339fba0c02429f3653f61d9753de82df8c9047d8eb584be3841f55d00bfe475a3050ca538adeddfbedb80fa056e607ec06ebe4a0a9ac4c6e029dbbea50536a852450081771d33153278166eb4f2a5478d9e722b3e68f0f6991199a658bf366654afb5fa8ed8229b0307fba05f708947b8ac1d32dcb6a22c6a5b666ec9dcc1603f5590570ecea8d303c74511a93f5d5402b349dad0fc705771eeb739c44d25cc7b1a09537a2deeccc110a1363291601fd6aa956770981afd276dd42769cebfafe84c71945ac46af2bf81ccf65540656260d65086b386496a2eed88d83f421caf86a1a50fcbc6abfa3192b73be27a5b9c11e4788fa8a42d2c8d7957800f871ff34a421ad86e5fc41c7ec05d5612e82c737a0aebc89c99598c7878ab24d8fb6e2e5dd064ab574e80351b198b60c90aefcff92e6dcd957b301e84f42e60b1f574e1644be898cfb43997287fd6fe1e974a60e77ecebfbce0faccfdb863e5ab21eac64d4e8b78e3aba441b35bc9f1e59df6b779c0998a522da6452d9e4779306cb2fed168aaaa24889f9ff4b75e12a0fc58a8a1c26e0b3ce5783c6a4dc125ff2a6e23330fbadabdc8339b78814f5f3e169101bbe5c6b27b5e30a35744f4bfe11a25280effac15a61462504c5e1999db93005b80ec19827ff5d470800df00", @ANYRES32=r7, @ANYBLOB="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"], 0x20c4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001601000100800c000180060001000c1a0000"], 0x38}}, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) socket$alg(0x26, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_wait(r10, 0x0, 0x0, 0xfdcd) 2m39.919643329s ago: executing program 0 (id=2168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0xff, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x4, 'fo\x00', 0x10, 0xfff, 0x27}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x8, &(0x7f0000000b00)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 2m39.855483662s ago: executing program 0 (id=2171): syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d86558da0a7f6b"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b4150000008b07405c000000005109b141711ede10000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x80, 0x7800, 0x600e, 0x6, {{0x14, 0x4, 0x1, 0x2a, 0x50, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @end, @timestamp={0x44, 0x10, 0x6f, 0x0, 0xf, [0x0, 0x9, 0x6]}, @end, @ssrr={0x89, 0xf, 0x4a, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x48, [@multicast1, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x101, 0xa, "b383f6ba310311ac"}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa6280"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, 0x0) writev(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd86, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x42090) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 2m39.632699392s ago: executing program 1 (id=2173): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0xfffffffffffffe02}], 0x18}, 0x40804) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) close(r0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000680001000000000000b788000a000000000000000600070003000000080008800400010008000500", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000380)=@bcast) r6 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x8, 0x0, 0x2000, 0xffffffffffffffff, 0xd5, '\x00', 0x0, r9, 0x5, 0x5, 0x0, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) 2m39.373179705s ago: executing program 4 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="112f9c669df1ffa212a53b6b178cc14fd9b29b5e120ceb78589a09a535cebaa153f9d1cfa0b168af50787d9b80c0149c6cc6e208df595f674b46e2", @ANYRES16=r0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e24, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x2f, 0x0, 0xee01}, {0xfff, 0x401, 0x7, 0x1, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0x6, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYBLOB="7d258e2826b0ae0bcb966795223f6fcbe793420beb3e097e3ccf699e105c4f9fa36ac27fcd53b9a9f2e962e405438dd5f20b7c2976f0b6a7bed676cbf8ef8506d20f1a205949e9045cfdd4ed484b0a302de29a6da35703fdadeff5472a4eb34deac96ed500ba6610098ba992e1e21731d07f6207998be6e30ca075a3a8c57d", @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRESHEX=r3, @ANYBLOB="0000000a770227"], 0x28}}, 0x804) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m39.279710994s ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xb, 0x1, 0x0, 0x1, [@generic="f24ab9c53b7fc0"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110528bd7000ffdbdf2509000000440003800600040069d7000008000300000000011400020000000000305f746f5f626f6e64000000080001000200000014000600feeeeb"], 0x58}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x88, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xaa}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x1080) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 2m39.085826386s ago: executing program 2 (id=2178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140a, 0x800, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x20000000) 2m38.994141627s ago: executing program 1 (id=2179): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r4, 0x0, 0xb) write$nci(r4, &(0x7f0000000240)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x2, {0xff, 0x1}}, 0x5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48815) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) 2m38.740736923s ago: executing program 1 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x10, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24020000}, 0x44010) r4 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f0000000080), 0x12) syz_emit_ethernet(0x76, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0, [@dstopts={0x84}], "83098ece0f967fda"}}}}}}}, 0x0) write$cgroup_devices(r5, 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x948, 0x160, 0x378, 0x378, 0x460, 0x630, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x401, 0x9, 0x6, 0xb0, 0x3, 0x8]}, &(0x7f0000000080)=0x78) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000bc0)=0x146, 0x4) accept4$llc(r7, &(0x7f00000009c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000a00)=0x10, 0x80800) 2m38.538598004s ago: executing program 2 (id=2182): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="130000000102039839", 0x9}], 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000001080)=0x7) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000040)) r4 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000002c0)={0xa, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x6b}, 0xc000040) ioctl$int_out(r4, 0x5462, &(0x7f0000001000)) 2m38.391416296s ago: executing program 1 (id=2183): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, r0, 0x59c19000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, "f8dbfac35f8b3446a5fdc76a22a0707cdc2cd136d52fbc5c82227c4f2a8c4e5d", 0x4, 0x0, 0x2566, 0x7fff}, 0x3c) r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x81800) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1e}, @empty, 0x0, "1dbd598eca53375ffb89093e48bc998a6282e06f28f735a32ada2ab3dfdf224d", 0x4, 0x7a54, 0x3c30, 0x200}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c840) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001600)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/51, 0x33}, {&(0x7f0000001400)=""/81, 0x51}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/88, 0x58}], 0x5, &(0x7f00000015c0)}, 0x40004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000016c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, r7, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001980), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x20000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001a80)={0x2d, 0x1, 0x3, 0x13a, 0x0}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000001b00)={r12, 0x1}, &(0x7f0000001b40)=0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000001b80)) r13 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e80)={0x0, 0x0, 0x0}, &(0x7f0000001ec0)=0xc) r15 = gettid() r16 = getgid() r17 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r18 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$unix(r5, &(0x7f00000045c0)=[{{&(0x7f0000001c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d00)="517906a2bc84e78164915213ed2b44bec883eeb7dec30613092922a63426be4338a1be84f69389942dd6525fa2fc7517a0f648fbe5f6b1a7b2b67c97c96d3a2ea48c3f110044a737e8cdc9b9811b398d0f6c1498be894074c45c6f4604044d59e3078c5f3a5efd13906f24d398e9a4accf652a4f88874000945cf2a70de3d0c4aaf640cef77fa577c09aeb0cf9a803f229d6d1dc5ee0a12c72ab7a0bd1c29e0d43ce159c92f2bc6b01d07d8960ad11ccaf470b14c9f3a34714102d9796d3967fbfc4d8e4fe34ec90a243a181c33e1f6236919a2c9bef4eb6bc7d3a97e20753a99af8e127abba5c5ade64dda50bb3142c8176f6bc895ec548ef8d", 0xfa}, {&(0x7f0000001e00)="83efaf9b23f807eeb91af3450dd93936de8edd9bf3667efe5e8ae5", 0x1b}], 0x2, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee01, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, r16}}}, @rights={{0x38, 0x1, 0x1, [r3, r6, r17, r0, r18, r4, r4, r6, r6, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r11, r3, r4, r6]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0x158, 0x2000c0c0}}, {{&(0x7f0000002480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002500)="5b843f9214a68a0dc85d9f3a0a13", 0xe}], 0x1, 0x0, 0x0, 0x4001}}, {{&(0x7f0000002580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002600)="d51f8eba7ecd5ca9ad051a7bd7150a902ea3dd392a06c66af0e8427accd41ba1626d8993851c02852cdf0da029aaa7907b0ca8674b0698ae21fed2712870bcdac7fcfa73c97fc17ade05514c0b2e0d3c02cdb42ec2f5fa18cf0046d393165eb091c52c53b02957a2c62e3f0becfee3e83c1c99acbb24b9066e4870de215590d5af2f9f6edb41f3c05dd79cb1b0ed78dc9b700532a1255401fa0d3ae013a592858421eeffa68c6f2d6c6ca0a468b4617dd93481bd61ad4f6a09e7ad263dba47e9ce20807bdd6d82c5e867768d2635865a7223c0a04cc40947ebec61", 0xdb}, {&(0x7f0000002700)="fbc0a8aacaa4bab09a37224e87ae79074c51ca631d2bef8a6709cdb378ef85c83384a2d353f4e1a0e78d93078d08c700d4dbe421b4c7beda2e541f86dd81541ffa50fe586b2764e0ed3c8f99c550f886a85559aed2d00fa01484e97b14cc9c3470a670d7f457b29aabc29c8cbc965be6db5d26bf516228765992ea057b04", 0x7e}, {&(0x7f0000002780)="fcbd3b8693478b2abe2a8f195bbfa54e0d27d1ed940b73c585e7fed6b8e173706884558e13bb7323f3fbec641eac66a1ce31dc87730471389460c4d5abb83a7f4532cca152781549d5f16bcf8c54aa66764f235cd40d0ba8552e00cf419424fcdf3661dc530ad8c7cdb6a104b70d1330c6c38a378f77f4a42a4a143349f9478bd10d0655b5", 0x85}, {&(0x7f0000002840)="318d38087131d9deed9b5e8b4972b49e40cac9b7609210d66261e75e7dac", 0x1e}, {&(0x7f0000002880)="7501bf04cba509d58cf531088fe7376631e8f9fee6b27f476ac6a781df50122b41fcdeb346b74d5d7edc6bd9b7013cfb9713d858649e11b61db64d0cdb223078fa5ca5e54da6fd", 0x47}, {&(0x7f0000002900)="a2ae5bc1d1c8cc8082313db4c2b07cb57ad02f841f0698058152198150b4a09a75b09a0df61ba76d0ae530db46b17ab06473b00df9f164f59eff638903ec752cbdd91a532244f1ce5e8c8e6940", 0x4d}], 0x6, &(0x7f0000002a00)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r11, r6, 0xffffffffffffffff, r1]}}], 0x40, 0x24000000}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002a40)="2426411239f7daf133193fc7181b16c45f620e8a5d31d6e1e20aac6b6e1f15f38eb097e2a4bf2bfbbf102e2228fdbe128ed8f60d700f7612ad20cda7751f346d0df16b2b66f345e897fe17a20a50324178f6074981268a52385e4a1fc1525fb0f0db193be13d96432bfd2c734b2aae802aa0", 0x72}, {&(0x7f0000002ac0)="834f434f64cf5a894932118fa7d2317c38aa5ed93f8d7586d57214d14f0d0bc2d990874985b46cbd036cd930a05f4d817413c491e36d79c13a33d33074c469847073", 0x42}], 0x2, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r2, r6, r2, r2, r3, r4, r11]}}], 0x70, 0x20004040}}, {{&(0x7f0000002e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000002ec0)="6618e031448de33f53e0a16e351a431ca2edbdfee652f1db9e68d008f11462ce3349144fe58dd8c6b3d4c4da4ea13b322e9cc18e7ab54f8a0b5a8a76339d54be4c63fc1d2ddfa9a98006d495cc1638450ccec9c4702198c7d6b96c449638cb3dee47ad243b3d9c5ec471f61f2276762afb795ccfeaedbb7f1538ed79504bce93200bae737727de9e3158e7d3f9cecfb65d416e51b91c40def9e528e28be6802d31b9bbf5597d59ec4f3b2a0088723d9db2c469d5bc323e6f97219447f1e6aa3467", 0xc1}, {&(0x7f0000002fc0)="52adb9c327e936295e904cc405f832e418a67728c3e88ddc0aa3c525d46cf74421bba0bd46bc5b0e04b67999ad9e6fcb132ccd005adf24d19258a88938ebef9fc24169ff8a3e0c8f0bd06f4303ea672380a95d3dc89c12b3fdddec7498da981cd725df666273dbe4da41216e900cda9c996b414583b6409d0bee0188b4a2b0861f5d22c84c468e5da6a761be42bcd6c234ecb0580d3a793e5c343f55d28694141d463eae7e5e5acc06caf664b730371f5694e68bf2c379e7e0a43fa03b7dfa20ba805916a603689e59e1d95876ea16492b524958e45ee4953f138b4d8d5bc67850cfe218717804de9ae2d96493e3c6dfbc7f026840bc02a83a36f7a9fc1d01e80dcd3cbb1c9964a61ab5f91e6a16cfd552c85fec9d5dfa2503b1f37a61ecfc4d2210da7819334f4d1b259c8606d8925b5e46f2c0d082e56c3d180a0c2ca179975e1755cf80af425be5e41b2042c67e8d2963405676a10ec4e5c2665800d655edce00f625963899c40df84a6526f46455a5f2604b8f2e009b552a6d9a530ae7a71f7a04cf0aa458bd2d5945afe11039f4c3ac9c35275b26bf153768c8d622ed1b50172b0439afa8ae599f50e14390847a670e22dd164e664ce069992aaecb801cad2e5a9a5fb79dc7881cd76e3dfc0b74d5090b657030799b3cae9f26bc72084429d4fbca5fb9f4b1ac7759971b561f369ae997b9d2ddbc9b17661fc8ab4008011d58ddc6d936dc241fb161f32259ececd5c94c52f30913b5f1e948192a198947fd316791458430f4f4d36850bbcf3eb66a62efd45e4115db349c53ce3fc1ceecd9b83341fcfb826ddf7bb6bcd1957736c99d86ecf015f634418f1882582650d03be226683fadcb6d5432866b5133bb6d934528ba0d2414a368d21e1fd21e38851046afa607eb3d0552cfc41a39c2d6fad3ed7b5faf2f76eb16d5e27d9ad1affc362dab277333ea3290857a6cb23d466dc4ad55f4a14c63a68c4613e9bcdbac5ca046758450f133418d01d82a3688681988ef73dd519f55a8b68aa58b11ed832bd2f7d257abff8e20429e6ce2e292353d30da2d0904d8f750e5ebcd2c1db06b3d7dd89715182daac3650ecad7f8e3605e9504e3d08a521dbdc85e519c701d79a66d2fdff3555ba76c97cb42be044163b599468a4bef2a196f087f20f6ab82488f854d7b604c6320b0be0d00e6b206a18a6cdc2074fefea4bda4d724b2d9d37d84040658a28555bb11e93bae829827fba3999acfc3c53ad2cf1e47ace7584e80dd7e6dbe42ed5d7230c8055924f7657a97cc03078028ed587a1d5cdbf0bcb25a341229bdfc0ef28a5bcf31f62444185ed960778422c981f8d0f4f6de7b42072b146ebbd3ec2c3a10709ed6ac3ade2030524e009204b2508d896cfa9c2b341e3087948cbe7d81aa5d8202fb3a879b4ae247d76e2df9b2d2bea357ab664304d0ae85545bde66b9ac8751ef36cd10bca22bd34b9fb6ad647f798a2dff3879a278000e8def9e4288271aa6d9a0cd8e997c914eb078945023cef7e41a36f1fe310d858c8a9510e904e3dbc6e761173b4dcbb9e2781d074e3e09fe3716ded5ac27ba07bfe24aa3f9abda22c36e06ca470cc6c0534e50584cac980aadfb3254d89b226ef9d4002c1448f62fc6a2879868b79705eb406d411d830239a6cc1bd399e6c551534f0044037caa5a37f5d319ac8534e923d19815ad110526ccebe7b34e4b94e999bc86e0c3cf94ef4c037b612faefe75be5a9676e11040dd7943bdf67e5817a64199fea69af0f055df583015d5ee0b18047510eb6dadf8957358e479d5584b4719758396a12d9d044e29d21819814a3e7333aa4f7fb21c531397031f89ec69fecb19c023069f97c0078c05296e010a9288fd01ccf0e2ddd0d1317e2cde7c1da7634682d03f4fb1ef3a828719d491664ab567b79f15c2fc34c1b1b48e34ebb80936bb0f321f7be9cc6445e1b5ce8f88199cc3c51a2d4cc897eb22c0a33b64856d2d822d44ada85405a1793df15919fed8083f5f4c1b3e61653746c27d44eaff268a38bcce8e80a4b2f7b3cd02869f8850bd2f6f7542012167ff0e1a86f37f03b8ed292a3b9a03cd160f07996a4c76463782348b4aa5fea2630e94af62b97e2fdbf32c18d8633f8271a67e9ce2eee3d3ae7344a07fcf87496a733c3321d288483f2a2d320cfa5f375464a54e09bdeeb725a791f9a55f22256ef944074d5b21ac5fac2f06967cbac38df2ea433dfeaa1dbc4ccbacc5d6572c202d0229305d8c31922715bb7f4e9a405fd2cc6b05c8295f647fd2737b82120d5546e6e8ca1da440ec9f11451d58c1494d24f77ec54ad6168b54d571bd969ef474f9637d5a58478f96a68c6208a254666f708cef4e3cb7f6d41da6167e677c9f3820d86a3c22679f8b629e504951ff19284d995dfeca10a3e19ea8400a0d977fdcc9d689792a40a7473207d269201d23e4d606d96292ba4056063e8176e7330e7a12415c72066fe4400b83609f939b2d6906952d171950831a1c616e365c6678283dc25235c8b43526fe7489a3fc79e280604755e0a706716b11c342e01eff85033f4c589d5451d750e12e71bd75f411727174a637fc59966bb942a5e8a7bc973dd0afe0c29615505f554b7246b6c6ad0b785e18fe1f69a535083700292c472fb3b7b746415e137079d9026815a920165c7e18fe024b68e2b31f4a61c5d075155de5271708b2b4d5e1a515f9785c2e5ffc01ff8dec5b63d91893a75952eb7f2437a1efb8cecb5a5e5a1ba07656cd196bd9baa8f13fce89b254f2193d650b4d34dad9022792e98319da9caeda5f85f664e321aa8b5809b25a440bf722ffb5e9b40f0796a914c718276dd834822f1e3b39b0f44f32b68c0547ed7f6bcf7cddf50164afc813710218770e53d830fdb6011870dc0ac4d8d45104f3566ee9cca51de1e18f7bce4960aabf5e953bfedde3ec16950bd9b6a5139b885a856c7917bb17571f0621d660b52b358a98d21b09272a2d3dbb6d91cfa569c3c4a4f6cb41cdff312048ac7feb8667a8d0633b44fb89639b945906c0032f1538180ad3a7c737ce8e0fa086665a23f8c88ee326e0dd7f94030747296515b2cf7021ad52dbcfcf894e8cfe2a30ea798df5012d4f26a7ed2bdff7040df580f72abedd2c8f1cf968db6fb1c0a3720fe30e76526638379627559b58d258c77269000f6eb00e6b71fe7a6b5e479f04e39f994801d06d00c5541c59259bf7e5e6cbbeed4513efb2eaabbe7459885e8c551d2b90a98ccfb4207bf71d4ffe0dc7dd81a5fa16b693e33d9436dde2466684ee197b9836fb28d709e9c902b8e768de6103a001c69d17b2e611f26728d6674cbc15f8db94dde50b0cb2e8815eb53338f0b0394551ec0609786fa0536b000ea25a83da90c2382d9ac7bbaf8092689d8d26f1f8d3ba94a51b63fa0e67dbe0b2a3155506661a467b901dbb4940008346bd62b4b96382d1880e889a17d1d3b628ebfc2a032fc56d1f9891967c95c7ea17284f541fc3fe382e7953ef1ddf96ae4a4e539468a398e095a4c5197f37eecabea5be78c6c2969cc7fe080c3cb2807fe9607a263ee2b583a986c89f5d766c5dd48c604679b2dca929c0eb457954fa1453c5b0402a1808e68a46800316972f027a9e5aded08083c3c935c06eafd2f651259fb0619a7f97c491f36934f91aff8cd1be8ea174bfa32e1d288cf39ed8094e917da6792b0edafb1f46d0224aa25b78081dd9c15de65b00ad61e901b44d3127c8a53a082848992a1c03bf7988103076c4e777ab87cde63021fa3fe49d910f0e36e7eed1b15769f69382ff4f10a372b59757b7b1de61eb86c0924b34136947215aa6728de944fb54ec9136b2c8558c4048f79065eec7d3bc38616591c79ddd746a02afb6fcf026397d2902b68ab1389d6f4e7d68cd81ae6b885ddc93a78ed7743119c8b74055a5bc7da57e9c0f43f9a9e4ff134a96608f075f795551eeea75968dbf06ee3c7adf2cd0d1ad16247058070ad3bddafe0845970283af5b73c858d2748a81695522e6bcfa605c150908a44f199808b170082fa53003f1e39f57629f91b55e28e97590102ee37ca94cc3740033774964677122caad0af18e96a42aba045e3b045207722bb4cedde01e034b3eeea626e0033efe2c0e5998f6566a5796fbb301f343bec80f072be308e6557977ec97eb8ed377f480a87993f1b6397ad901546daf8d733ed092cc4534b6711f7b594a57acd33b30025d6501d60533559be3a27b6bf6b0000156ff1d15115a057b0191f4a78ab784cc55e123101e6692ea4185a484cfe7c829fba51825d4a7121e3194cd821ac2262dcb053f956de3f92294e02a16795ccdaf9ff110d2e6b5d58dbfdd1326b13ab30da523c0caf6bb1ea3555d68267e97e9da3bc79c2e92619317783302482bebbfadbb026c98c78a878eb093be4693268cd92bf8a34f5a0bb5362bf1fbd7dac61fb9d11a28f5fd46d8c7c6e3b7737c6f57ac112e0e0826c5a6a5585f3c0b85d6ca3b60743c8db3155571dd9f07c1609a039020778e921055f62955895475b3e7ede637941f81e1efa40af49211169dad7214c6799bde9311b183f7db16ca95e873ec327bcefa82e799e720945380f46c664c061dde8ae735aa1a825a4d0339dce022fb95e4baa620683b62f062a5fef3ae174f543034b4901b2a42f83682e5ba6d88bc47da2c8f1cc96cc5a421b7c6161713bf02b807ebfa24411a254618de4d1806110582d870c32a3f8f6f941016d8743037a7da4a7c2e588ef2d2c635a72c027137175b44bd6ad6c43041ea439dd0a83c52399e7cdbc1346c8ec3dd55a6232deb538149913acfa243f632e03751baf2ef8b7e314d66564de29b83beb57cc1065a2fc08981d17e981b2fdac8912d6b93c59cbc8a469557656e09e55078c9903f3393125b2dea72f488deb4b23eeb43f81cc9b43d6b4555f0d7813df67888bf78201eb8083282becbb6e132e069d1081328ba105cedfece25878e467556bef39975a69f1434f43ecca5cd834d91c102ebe84ddf9eca101f9854d34d7f361cf3735691e346e76d2e6a1d7eafa8c4f5248bff55027c909eaf9723b61d51f5f2f7187578c1d8bd3b409507e495903dc9de4e6f052e1a9432753e2cd083171ec89ba5c9115ab8f8b00e199a139657951c6f56fe16503d30eccf890858fec30505c4fe744292cf0c5fd5e3c94db8d957b173d3cddc63543047105d62200a58927204c798124b48270885faa33f03a93d4c659c4221ccee1ce36495104f3222f37ded194ec8095551d11de61502c82ce49f56696b2c3662b5399fa92079da8b8d040afdc936f2a93bb11d1db6bb38b172e7e06c894e2cc12ef8296424151e3d653f9b43749df79d0f03533f03269608d5f0c284baec34312489eb67222f21f90179afe8237c6c6180bab4298de7e4641ce38f073ad02cc1daf91fb261f8947a3eac6810be7b24fdfe783797b7b7099d456259431f93564bbff3e55a18623298ca19aa004a05e9e9c1b59ab1a11c3328151276b3f41e428f6c89cc385b9249183c508af71345f07ccd4cb53b4ead7ab58a1b1cd7be76fa9aba068317fdef94d0b8a4ca7ae5d35f3bc4f37150ecd1b51a6f6ae635ff3fed96c4556113ec76063850694fd6d35a7d10ab87b928c6523975c0c425296c8767853012068974d9df1dd208cc42bded75c89c85dce29f535911dd47f7f98848673f1091ffffb93a7aed2e34ee3a9c49d7ae92ad904494feddaf6bd1d261e030273e336768c149e8770fd26630f517cc47621b977e7346d6e15fe44472cbb2", 0x1000}, {&(0x7f0000003fc0)="a6d5ab8caacbdd5cecdc5caf26f3d85f4498c5d59394d8fd4b46c091cbced711fbcc9dbe25fe2d5f5b39fcceeabea78b3ffdc08b289cafc45acc05924e29a3b4f9e04eef84ee9b69450885cd45d7652afd9bf3e9b70b3a0d0e60db894d15c1811b7ce3d8f16bfe70a8823492507f4eb8d5fb9b8afb9380d19a96f3397f13edf46d3a329d216fe8d3e30b0faf475af7e547d36efb2683cd9b55c0c04ded2498adfd7b10c281c4153f7b84c2996cfe5673e406f5cfd72db237cf46dc9a1e2042a50fade23e03a9abec84e20f8f0cd3918e48958ba33ebce3b7", 0xd8}, {&(0x7f00000040c0)="305b6838f491f643a193c620d12c58ea2029e985780f504e7ec312145bae28d09c214e2ffc9cba419fed20626f64ef413b01a581f58ac3f36147e37d5043cc48e5fe52b506576dfde9eab1d23d3de78a342ec36ce7144e0ca0e5bb0603501ebdb6bb1fefcc152b65e2ba4a95b03d0ab4290ebb8b236fad0adbd66852b74dd410c09d72983f231c4d55e14b8578ba777199057112c0f953139b90fa0944d202c65425a7cb0dacbb56b3ec2d2c4aeb44973d3e69fdaea907ecd3b95498fee659bf04ce8ae9646e130cca8e709c0aebdfb7", 0xd0}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f0000004200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004280)="be6bfe6bdb99c0c16d7e5b079981fdce0fb8c41b566a180ecff96956e4aaa8781945f534218a6aa48bd879e47b4b1f09f3cd3ce096528257a8906fb68b16dac257a32fe7647b6a8d8a9716cb82789de0f247323fb65ce8ca8369e591878ac3ac9cc2d1ab853107e42fd60147b4e8b191e7c8613d0e0f486a6555019f4e7d1056895ccad9698113d58302810b64939eacb99caa7af5afd56700c99332f91a3ab5a7b4c43f93a98436b475d1dcd8e8f2e1e9ba49d0bf7b083c68dc820e8c97123999bd5a657dcfd0b012cc320b0b6c467e509cf28716f1d6e567e21ef68ff7f771c254bede076c2604db33b4e60062fdc3d5c97e", 0xf3}, {&(0x7f0000004380)="6904e9555fbce2dc8ba7cb6e6b2222902aac005e1f6e0b15f219863e3d9801ced340d55b72c841cc1e1e3ef88ca727661a5f68c7dfb02953a6cefce7e04af5e1d758c82386775f8c0ea1ce090cb76558ebee56fe0453bd81e5b1f00adbfe2d401589adcc3d267864b6a18a9d33b622c6ebf59d15f82e26122d026980790b3f5562634d68ca933ef78a4457089a8e96f9307254ebce11f09cfbd4689eb87801391d3524b2ff1dc6a5328ccc1b0b0e6937ebd70d81be1df5ed7c82982405080cdc8f8389697c294a", 0xc7}, {&(0x7f0000004480)="92bbf886b849b036ffd4c4975d9837f7f4a0c0ab833b868bcf02994836714f00c8e54d2f91cb1ae5a1f2068da499d3cdda140c0cb3172cc4767472d7034eb7df0e5a423921dc616e75fc15580ff5781ba2d4b23e24e8e44f54cb6bcb2a61c9df47b38928dc980c11aad20a1cd02e9fd873d7f67201e66be9ea522b4dc4351d343f98f1cc2aacb56b3669887f2915eb7d9c48aa684fc1d9fb55ef0f7ebcdb74a41dee75b797ed01820808d3d7a77633c55a4fb98a213ad4bbef076bdcd8ce8b46475eb59a95aafaed3cc64c46de5e017e1194e930e01950d903c3a159", 0xdc}], 0x3, 0x0, 0x0, 0x40000}}], 0x6, 0x4000000) 2m38.389568578s ago: executing program 2 (id=2185): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x430, 0xffffffff, 0xf0, 0x278, 0xf0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffff00], 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x3a, 0x8, 0xa, 0x68}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6a, 'syz0\x00', {0xd2ff}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x67, 0x7, 0x9, 0x9, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, [0x0, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x1, 0x110}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x12}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0x0, 0xffffff00], 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {}, 0x32, 0xa, 0x1, 0x42}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x6, {0x5e3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000200000001010000009fbf00000006200000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="0300000001000000040000000a00"/28], 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b00010062726964676500001800028008001400aaaaaaaaaaaa00000800090000000000"], 0x48}}, 0x4000) 2m37.916993585s ago: executing program 2 (id=2186): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001180)={{{@in=@local, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f0000000340)=[{r1, 0x6100}, {r6, 0x201}], 0x2, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc040000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf25030000000c000180080003000200000020010680cf0003009b30ced4426e20b78a7b83f7f008ce7a62366688459553466f5c082ddbcac90b2db08d604daa8c5dcccb4465a0231bfaab616df90ea433841715b8d2fc33bfd3974e75b707000000000000008e4aa7af587b29c9c7eaad64d12137e34c93da44c33751d039c288229b62bf6e14cf42037db70c7c778982fa09c1d3a100323fdc44855df8d8540e74cd04c9af5c2e7c69e82a89c586a8c2666cbf2f1c091ca364568f75ccc52c21f9781dab993fd8b93b29afbaba811d57191016930c962cda31a608846f385e6bb1870ee0004400040067636d28616573290000000000000000000000000000000000000000000000001c0000007ffee477dfb7903794ef43ef33109194eb80758ee11b6be87454e2fe08000100000000000400078014000380080002000800000008000200070000008400048014000780080001000e00000008000200001000001300010062726f6164636173742d6c696e6b00004c000780080004000200000008000100060000000800030007000000080001001500000008000300faffffff08000400ff0300000800030002000000080003000100000008000200050000000900010073797a31000000006c0004800900010073797a31000000004400078008000300f4ffffff08000100020000000800030006000000080001001300000008000100090000000800020000040000080001000800000008000300ae0800000900010073797a30000000000c00078008000200001000001400058008000100756470000800010075647000cc0006800400020008000100c22e0000080006000700000008000600050000000800010003000000a200030053abbe42a16357f32188ae81623dad26c1aaf88099e2652aea5962ab1295c1b64d80457a43bd4fe8cd02a20a0bf412199ecccfbc23f51fa0c9c0e188f1327a990f6f2aef1ac446864b52f2a0af5a05fb9e5f080507e0e804e21232384cdd111f72daf9ee25d353271433152cbe1c1e4717fc0ea1b01ab3887348e6b2849ff5113a74d1e40a02705f622bee3d2733772e94a3759f8fb9fe06ee1718b4839d00008c0106800800060089050000370003001a87c1408ddecb5015f50e6cf75df3bfce4ca687cf76c96786025e667d69327b85e0ebb3d3e99483181354f0911b9635b639f600b20003004cab9f0a7a7cf63963d1959bbd49017f9309c1a5ac302cd2fb8c9714f2c326d0cd16b43b5b58cd2b062a77761daa390786f98fefe7707b8ed4949b9659bdc4b6bd6396b00d5576c8ccb32e998ab58942c4cf08f4c53fbaaaba93e5f2080fb5528c59eebc6c533f852faf6068c5c280823aebe11fdc8ac9b3a84fbe6f9d1bf97fa0f42bdba88863f79e444c9c43744034aa0a5db686757663851930045c16fe33724ef6411beb62a77938097f06a6000008000600340000004200040067636d28616573290000000000000000000000000000000000000000000000001a0000004a9579cbe160f657926835ff3b8f6226ae658a4789418ec40899000046000300a97776c164dd733525edfdd40c6cbe026f11a5e444a5dd04beca391b2b3eb4e2cca3f0fb73ae490817d62bdb64ce3ad862df89cf7868e3be01d304c7acfa85d3c3db00001800028008000100ff0000000400040008000100ffffff7f"], 0x4cc}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5], 0x44}, 0x1, 0x2}, 0x40000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) 2m37.698975435s ago: executing program 2 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000200000000000000b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11e8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c7042c04962000092a05019ac07a602061c96baebc989f1f34a214e672640323a587d2a1fcf07000000eca0a7b66c60c527bae4b500", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b807200500000000", &(0x7f00000004c0)=""/18, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002200000000000000000080071108c0000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m37.359451093s ago: executing program 1 (id=2188): socket(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x62040200) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(0xffffffffffffffff) (async) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x80800) (rerun: 64) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x6f4}], 0x1}}], 0x1, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, &(0x7f0000001540), 0x0}, 0x20) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x16, 0xa01, 0x70bd28, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m37.316821886s ago: executing program 2 (id=2189): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x1}], 0x1, 0x4020, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m22.921293728s ago: executing program 33 (id=2171): syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d86558da0a7f6b"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b4150000008b07405c000000005109b141711ede10000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x80, 0x7800, 0x600e, 0x6, {{0x14, 0x4, 0x1, 0x2a, 0x50, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@end, @end, @timestamp={0x44, 0x10, 0x6f, 0x0, 0xf, [0x0, 0x9, 0x6]}, @end, @ssrr={0x89, 0xf, 0x4a, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x48, [@multicast1, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @generic={0x101, 0xa, "b383f6ba310311ac"}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa6280"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, 0x0) writev(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd86, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x42090) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 2m21.903740381s ago: executing program 34 (id=2174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="112f9c669df1ffa212a53b6b178cc14fd9b29b5e120ceb78589a09a535cebaa153f9d1cfa0b168af50787d9b80c0149c6cc6e208df595f674b46e2", @ANYRES16=r0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e24, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x2f, 0x0, 0xee01}, {0xfff, 0x401, 0x7, 0x1, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0x6, 0x2}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYBLOB="7d258e2826b0ae0bcb966795223f6fcbe793420beb3e097e3ccf699e105c4f9fa36ac27fcd53b9a9f2e962e405438dd5f20b7c2976f0b6a7bed676cbf8ef8506d20f1a205949e9045cfdd4ed484b0a302de29a6da35703fdadeff5472a4eb34deac96ed500ba6610098ba992e1e21731d07f6207998be6e30ca075a3a8c57d", @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRESHEX=r3, @ANYBLOB="0000000a770227"], 0x28}}, 0x804) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m20.120498672s ago: executing program 35 (id=2188): socket(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x62040200) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(0xffffffffffffffff) (async) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x80800) (rerun: 64) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e1", 0x6f4}], 0x1}}], 0x1, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r4, &(0x7f0000001540), 0x0}, 0x20) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x16, 0xa01, 0x70bd28, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m18.798887889s ago: executing program 36 (id=2189): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x1}], 0x1, 0x4020, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m0.724833236s ago: executing program 5 (id=2206): socket$inet_sctp(0x2, 0x1, 0x84) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) socketpair(0x1a, 0x5, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) connect$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x2}, 0x2}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x12, 0x2, 0x1, 0x0, 'veth1_macvtap\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1c12bb52ea6c767a}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)) r3 = epoll_create(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000500)={0x40000000}) write$cgroup_int(r5, &(0x7f0000000080)=0x2, 0x12) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00', 0x0, [0x9, 0xffffffff, 0x7, 0x4, 0xb]}, &(0x7f0000000180)=0x54) 52.414329635s ago: executing program 5 (id=2207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000580)=""/148, &(0x7f0000000440)=0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f000000000084"], 0x4e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x170, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c852952}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65b0ef4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22f73fc7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a06b1e2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14670451}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12fc5888}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34c1a637}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e39bb9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e5e}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bc8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d4c543a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e46db3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40cbab49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x323f49be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55536c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34c9b4f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x221f837e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb870d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a54450c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59717251}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d7e2897}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x771246e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48efcbb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a0824a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74136fe7}]}, {0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x58000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r7, 0x72b}, 0x14}}, 0x0) 39.488603264s ago: executing program 5 (id=2208): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x7}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 32.38314884s ago: executing program 5 (id=2209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000091400078008001140000000000500150001000000050005000a000000050001000700000005000400000000000900020073797a32000000000c000300686173683a6970"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r3, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0x300, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x20}}, 0x4004090) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x10, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x41) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0xa0000001, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r9], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlinkprop={0xe0, 0x6c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0xc220, 0x800}, [@IFLA_PHYS_SWITCH_ID={0x7, 0x24, "c5529b"}, @IFLA_CARRIER={0x5, 0x21, 0x40}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, 'syzkaller1\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6eace6cdd26b6c2279ed449b4c6c7443"}, @IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}]}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0x5}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_EVENT={0x8, 0x2c, 0x7ff}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0xc0}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)}], 0x1}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r12) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r13, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.524284588s ago: executing program 5 (id=2210): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000030000480"], 0x84}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000006300), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r3, 0x501, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008058}, 0x30fcbe8a6bf4bf80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000030000480"], 0x84}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000006300), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r3, 0x501, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008058}, 0x30fcbe8a6bf4bf80) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) 16.902859019s ago: executing program 5 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x1, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) unshare(0x68040200) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x32, r1, 0x97369000) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000004000000da41000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r5, r6, 0x0, 0xffffffff004) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000000c0)={r8, 0x5, 0x5, 0x3}, 0x10) close(0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 0s ago: executing program 37 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x1, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) unshare(0x68040200) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x32, r1, 0x97369000) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002500000004000000da41000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100800400009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r5, r6, 0x0, 0xffffffff004) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000000c0)={r8, 0x5, 0x5, 0x3}, 0x10) close(0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) kernel console output (not intermixed with test programs): length. [ 202.770556][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.735'. [ 202.914805][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 202.952756][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.045857][ T8911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.137751][ T8925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 203.251885][ T8917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.739'. [ 203.263177][ T8918] lo speed is unknown, defaulting to 1000 [ 203.633854][ T8938] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.138268][ T8918] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.167359][ T8952] blkio.reset_stats is deprecated [ 204.174977][ T8918] lo speed is unknown, defaulting to 1000 [ 204.175708][ T8919] lo speed is unknown, defaulting to 1000 [ 204.538188][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 204.750036][ T8964] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 205.502949][ T8986] netlink: 156 bytes leftover after parsing attributes in process `syz.0.756'. [ 205.514335][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 205.609204][ T8927] lo speed is unknown, defaulting to 1000 [ 205.625799][ T8919] virt_wifi0 speed is unknown, defaulting to 1000 [ 205.688499][ T8989] netlink: 'syz.5.757': attribute type 21 has an invalid length. [ 205.713850][ T8989] netlink: 128 bytes leftover after parsing attributes in process `syz.5.757'. [ 205.747891][ T8989] netlink: 'syz.5.757': attribute type 5 has an invalid length. [ 205.787439][ T8989] netlink: 'syz.5.757': attribute type 6 has an invalid length. [ 205.826365][ T8989] netlink: 3 bytes leftover after parsing attributes in process `syz.5.757'. [ 205.853745][ T8919] lo speed is unknown, defaulting to 1000 [ 206.044438][ T8995] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 206.377323][ T8995] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 206.433522][ T8995] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 206.530399][ T8927] virt_wifi0 speed is unknown, defaulting to 1000 [ 206.821348][ T8927] lo speed is unknown, defaulting to 1000 [ 206.889676][ T9017] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 207.111555][ T9019] erspan0: entered promiscuous mode [ 207.126176][ T9019] erspan0: entered allmulticast mode [ 207.187694][ T9017] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 207.360822][ T9025] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 207.393078][ T9025] geneve0: left promiscuous mode [ 207.407726][ T9025] geneve0: left allmulticast mode [ 207.448988][ T9025] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 207.476584][ T9025] team0: Failed to send options change via netlink (err -105) [ 207.485031][ T9025] team0: Port device geneve0 added [ 207.496422][ T8188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.505624][ T8188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.632738][ T8188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.672375][ T8188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.041329][ T9042] tipc: Started in network mode [ 208.047459][ T9042] tipc: Node identity , cluster identity 4711 [ 208.056164][ T9042] tipc: Failed to obtain node identity [ 208.082028][ T9042] tipc: Enabling of bearer rejected, failed to enable media [ 211.354468][ T9052] __nla_validate_parse: 1 callbacks suppressed [ 211.354488][ T9052] netlink: 88 bytes leftover after parsing attributes in process `syz.0.773'. [ 211.552434][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.775'. [ 212.139713][ T9071] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 212.315982][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 212.353793][ T9071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.630781][ T5826] Bluetooth: hci5: link tx timeout [ 212.639149][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.661913][ T5823] Bluetooth: hci5: link tx timeout [ 212.668532][ T5823] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.952502][ T9093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.784'. [ 213.254761][ T9104] Bluetooth: MGMT ver 1.23 [ 214.087923][ T9148] nbd: must specify a size in bytes for the device [ 214.138430][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 214.269508][ T9154] [†’Ì: entered promiscuous mode [ 214.562299][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 214.746223][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 214.964915][ T9177] netlink: 96 bytes leftover after parsing attributes in process `syz.1.797'. [ 215.155367][ T9185] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 215.230367][ T9185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.279206][ T9190] ip6gretap1: entered allmulticast mode [ 215.390405][ T9190] bond3: (slave ip6gretap1): making interface the new active one [ 215.403623][ T9190] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 215.518421][ T9194] syzkaller1: entered promiscuous mode [ 215.523958][ T9194] syzkaller1: entered allmulticast mode [ 215.789903][ T9209] netlink: 'syz.0.805': attribute type 4 has an invalid length. [ 216.271607][ T9225] netlink: 'syz.4.810': attribute type 2 has an invalid length. [ 216.319999][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.811'. [ 216.342218][ T9231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.811'. [ 216.353816][ T9231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.811'. [ 216.364163][ T9231] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 216.437878][ T9232] sit0: entered promiscuous mode [ 216.448235][ T9232] netlink: 1 bytes leftover after parsing attributes in process `syz.5.812'. [ 216.634548][ T9240] netlink: 80 bytes leftover after parsing attributes in process `syz.1.814'. [ 216.749234][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.766517][ T9237] veth0_to_bond: left promiscuous mode [ 216.772389][ T9237] veth0_to_bond: left allmulticast mode [ 216.892730][ T9247] netlink: 96 bytes leftover after parsing attributes in process `syz.5.816'. [ 216.907282][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 216.974172][ T9248] netlink: 'syz.5.816': attribute type 22 has an invalid length. [ 216.982817][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.5.816'. [ 217.030899][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'. [ 217.063034][ T9237] macvtap1: left allmulticast mode [ 217.073795][ T9237] macsec1: left promiscuous mode [ 217.079231][ T9237] macsec1: left allmulticast mode [ 217.134009][ T9141] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.153258][ T9141] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.215495][ T9141] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.252350][ T9141] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.282459][ T9239] lo speed is unknown, defaulting to 1000 [ 217.398086][ T9259] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.819'. [ 217.876846][ T9269] syzkaller0: entered promiscuous mode [ 217.882469][ T9269] syzkaller0: entered allmulticast mode [ 217.964672][ T9239] lo speed is unknown, defaulting to 1000 [ 218.689583][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 221.136814][ T9281] batadv_slave_0: entered promiscuous mode [ 221.147684][ T9281] batman_adv: batadv0: Adding interface: macsec1 [ 221.154278][ T9281] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.181055][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.208088][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.235639][ T9281] batman_adv: batadv0: Interface activated: macsec1 [ 221.509473][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.832'. [ 221.639798][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 222.895325][ T9343] netlink: 'syz.1.844': attribute type 21 has an invalid length. [ 222.937538][ T9343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.844'. [ 223.289864][ T9351] tipc: Enabled bearer , priority 0 [ 223.310351][ T9351] tipc: Resetting bearer [ 223.365447][ T9350] tipc: Disabling bearer [ 223.574761][ T9364] netlink: 6 bytes leftover after parsing attributes in process `syz.2.846'. [ 223.687375][ T9364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.780996][ T5935] lo speed is unknown, defaulting to 1000 [ 223.853403][ T9378] bridge_slave_0: left allmulticast mode [ 223.878972][ T9378] bridge_slave_0: left promiscuous mode [ 223.897370][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.927437][ T9378] bridge_slave_1: left allmulticast mode [ 223.933346][ T9378] bridge_slave_1: left promiscuous mode [ 223.939258][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.963456][ T9378] bond0: (slave bond_slave_0): Releasing backup interface [ 223.967801][ T9382] netlink: 18 bytes leftover after parsing attributes in process `syz.4.854'. [ 224.091211][ T9378] bond0: (slave bond_slave_1): Releasing backup interface [ 224.114388][ T9378] team0: Port device team_slave_0 removed [ 224.134889][ T9378] team0: Port device team_slave_1 removed [ 224.142041][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.149729][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.183311][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.192831][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.204049][ T9378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.261627][ T9380] team0: Mode changed to "activebackup" [ 224.286718][ T9384] veth0: entered promiscuous mode [ 224.319169][ T9384] veth0: left promiscuous mode [ 224.534303][ T9394] netlink: 'syz.5.858': attribute type 21 has an invalid length. [ 225.077710][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 225.109014][ T9419] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 225.137094][ T9419] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 225.541206][ T9435] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 225.906461][ T9445] netlink: 11 bytes leftover after parsing attributes in process `syz.0.873'. [ 225.915811][ T9445] netlink: 11 bytes leftover after parsing attributes in process `syz.0.873'. [ 225.967379][ T9449] netlink: 11 bytes leftover after parsing attributes in process `syz.0.873'. [ 226.013395][ T9449] netlink: 11 bytes leftover after parsing attributes in process `syz.0.873'. [ 226.744424][ T9476] __nla_validate_parse: 3 callbacks suppressed [ 226.744445][ T9476] netlink: 56 bytes leftover after parsing attributes in process `syz.4.879'. [ 226.884853][ T9468] lo speed is unknown, defaulting to 1000 [ 227.251454][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.264726][ T9498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 227.289354][ T9500] sctp: [Deprecated]: syz.2.885 (pid 9500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.289354][ T9500] Use struct sctp_sack_info instead [ 227.489881][ T9468] lo speed is unknown, defaulting to 1000 [ 227.853386][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.888'. [ 228.085282][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 228.126331][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 228.438257][ T9543] x_tables: duplicate underflow at hook 1 [ 228.597859][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 228.640413][ T9549] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 228.697093][ T9549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.374706][ T9577] netlink: 'syz.5.905': attribute type 9 has an invalid length. [ 230.800635][ T9597] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 230.918490][ T9597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.943402][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 230.956505][ T9597] bond4: (slave batadv2): making interface the new active one [ 230.980891][ T9597] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 230.990083][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 231.204502][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'. [ 231.531449][ T9603] bond4 (unregistering): (slave batadv2): Releasing active interface [ 231.572694][ T9603] bond4 (unregistering): Released all slaves [ 231.619525][ T9625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 232.008970][ T9644] xt_hashlimit: size too large, truncated to 1048576 [ 232.058353][ T9643] lo speed is unknown, defaulting to 1000 [ 232.182348][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 232.223876][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 232.314228][ T9643] lo speed is unknown, defaulting to 1000 [ 232.435024][ T9655] syzkaller1: entered promiscuous mode [ 232.503017][ T9655] syzkaller1: entered allmulticast mode [ 233.419189][ T9677] tipc: Enabling of bearer rejected, failed to enable media [ 233.669052][ T9688] bond0: entered promiscuous mode [ 233.718512][ T9688] bond0: left promiscuous mode [ 233.740654][ T9677] SET target dimension over the limit! [ 234.189642][ T9690] lo speed is unknown, defaulting to 1000 [ 234.533845][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 234.558903][ T9709] netlink: 'syz.1.942': attribute type 12 has an invalid length. [ 234.734532][ T9709] veth1_to_bond: entered allmulticast mode [ 234.809775][ T9712] veth1_to_bond: entered promiscuous mode [ 235.226396][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 235.248864][ T9707] veth1_to_bond: left promiscuous mode [ 235.265226][ T9707] veth1_to_bond: left allmulticast mode [ 235.703512][ T9721] lo speed is unknown, defaulting to 1000 [ 235.733827][ T9690] lo speed is unknown, defaulting to 1000 [ 235.864729][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'. [ 235.896316][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 235.905423][ T9741] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 236.048203][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.186633][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 236.786401][ T9721] lo speed is unknown, defaulting to 1000 [ 236.944529][ T9769] netlink: 'syz.1.956': attribute type 10 has an invalid length. [ 236.964107][ T9769] netlink: 228 bytes leftover after parsing attributes in process `syz.1.956'. [ 237.946351][ T5826] Bluetooth: hci0: command tx timeout [ 237.983716][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 238.706519][ T9795] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.615913][ T9811] netlink: 'syz.1.961': attribute type 13 has an invalid length. [ 239.665916][ T9811] netlink: 'syz.1.961': attribute type 17 has an invalid length. [ 239.823207][ T9811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.502916][ T9840] IPv4: Oversized IP packet from 127.202.26.0 [ 240.517712][ T9839] IPv4: Oversized IP packet from 127.202.26.0 [ 240.559547][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 240.646355][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 241.120045][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.969'. [ 241.222553][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.969'. [ 242.042060][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 242.111119][ T9877] netlink: 68 bytes leftover after parsing attributes in process `syz.0.971'. [ 242.335587][ T9855] batman_adv: batadv0: Interface deactivated: macsec1 [ 242.350861][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 242.443473][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 242.474301][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 243.327816][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 243.361692][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 243.705390][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.982'. [ 243.724942][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 244.083256][ T9941] netlink: 'syz.0.985': attribute type 29 has an invalid length. [ 244.458941][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 244.633729][ T9962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.992'. [ 244.669683][ T9962] unsupported nlmsg_type 40 [ 244.687607][ T9962] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 244.713633][ T9962] netlink: 244 bytes leftover after parsing attributes in process `syz.2.992'. [ 244.824726][ T9958] SET target dimension over the limit! [ 245.180266][ T9957] lo speed is unknown, defaulting to 1000 [ 245.557326][ T9984] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.561781][ T9985] netlink: 11 bytes leftover after parsing attributes in process `syz.1.998'. [ 245.630134][ T9957] lo speed is unknown, defaulting to 1000 [ 246.045166][ T9996] lo speed is unknown, defaulting to 1000 [ 246.060776][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1002'. [ 246.981928][ T9996] lo speed is unknown, defaulting to 1000 [ 246.982505][T10010] lo speed is unknown, defaulting to 1000 [ 247.284509][T10011] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.355655][T10021] No such timeout policy "syz1" [ 247.369408][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 247.489313][T10021] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.515730][T10021] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.663406][T10011] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.728922][T10021] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.739661][T10021] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.836962][T10011] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.943135][T10021] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.985157][T10021] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.062493][T10011] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.152519][T10021] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.206091][T10021] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.270986][T10010] lo speed is unknown, defaulting to 1000 [ 248.597153][ T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.698770][ T9125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.719949][ T9125] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.757020][ T9125] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.765354][ T9125] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.843570][ T9125] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.866360][ T9125] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.885023][ T9125] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.933912][T10049] __nla_validate_parse: 2 callbacks suppressed [ 248.933932][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 248.950238][ T9125] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.970450][ T9125] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.989188][ T9125] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.077089][ T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.388250][T10058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1018'. [ 249.863635][T10062] lo speed is unknown, defaulting to 1000 [ 250.704970][T10078] 8021q: VLANs not supported on vxcan0 [ 250.802394][T10062] lo speed is unknown, defaulting to 1000 [ 251.180903][T10080] vxcan3: entered allmulticast mode [ 251.444558][T10089] erspan0: left promiscuous mode [ 251.450351][T10089] erspan0: left allmulticast mode [ 251.455897][T10089] sit0: left promiscuous mode [ 251.855665][T10099] netlink: 'syz.4.1029': attribute type 13 has an invalid length. [ 251.887106][T10099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1029'. [ 251.987893][T10102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1030'. [ 252.828191][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1033'. [ 253.457755][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'. [ 253.653770][T10147] pim6reg: entered allmulticast mode [ 253.681327][T10148] pim6reg: left allmulticast mode [ 253.864773][T10142] lo speed is unknown, defaulting to 1000 [ 254.133738][T10158] netlink: 'syz.4.1041': attribute type 83 has an invalid length. [ 254.155509][T10158] netlink: 'syz.4.1041': attribute type 11 has an invalid length. [ 254.192191][T10158] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1041'. [ 254.333090][T10158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.533808][T10142] lo speed is unknown, defaulting to 1000 [ 255.558096][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.498223][ T7073] Set syz1 is full, maxelem 65536 reached [ 258.023444][T10191] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 258.222313][T10191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.302368][T10208] bond0: (slave syz_tun): Releasing backup interface [ 258.395172][T10208] bond0: (slave bond_slave_0): Releasing backup interface [ 258.403446][T10223] ip6t_srh: unknown srh match flags 4000 [ 258.417053][T10223] nbd: must specify at least one socket [ 258.439528][T10208] bond0: (slave bond_slave_1): Releasing backup interface [ 258.467788][T10208] team0: Port device team_slave_0 removed [ 258.518301][T10208] team0: Port device team_slave_1 removed [ 258.537434][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.545073][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.592585][T10208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.787067][T10234] netlink: 'syz.2.1060': attribute type 2 has an invalid length. [ 258.798655][T10236] netlink: 'syz.2.1060': attribute type 2 has an invalid length. [ 258.893015][ T9131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.079677][ T9131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.134154][T10235] lo speed is unknown, defaulting to 1000 [ 259.320141][ T9131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.463617][ T9131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.280893][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1071'. [ 260.473553][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 260.482880][ T9131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.494214][ T9131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.504368][ T9131] bond0 (unregistering): Released all slaves [ 260.526498][T10235] lo speed is unknown, defaulting to 1000 [ 260.639149][T10271] lo speed is unknown, defaulting to 1000 [ 260.993790][T10281] tipc: Started in network mode [ 261.003484][T10281] tipc: Node identity fa3a5ee37868, cluster identity 4711 [ 261.016646][T10281] tipc: Enabled bearer , priority 0 [ 261.077075][T10281] syzkaller0: entered promiscuous mode [ 261.094115][T10281] syzkaller0: entered allmulticast mode [ 261.128241][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 261.344842][T10284] tipc: Resetting bearer [ 261.373884][T10280] tipc: Resetting bearer [ 261.414865][T10280] tipc: Disabling bearer [ 261.436208][T10271] lo speed is unknown, defaulting to 1000 [ 261.512986][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1077'. [ 261.526195][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1077'. [ 261.610529][T10299] netlink: 'syz.5.1077': attribute type 3 has an invalid length. [ 262.507574][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1085'. [ 262.533863][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1085'. [ 262.589728][T10337] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 262.740187][T10337] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.762869][T10337] bond0: (slave team0): Enslaving as an active interface with an up link [ 262.800157][T10344] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 262.817640][T10344] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 263.004137][ T9131] hsr_slave_0: left promiscuous mode [ 263.055967][ T9131] hsr_slave_1: left promiscuous mode [ 263.065546][ T9131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.096394][ T9131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.105099][ T9131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.113074][ T9131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.151482][ T9131] veth1_macvtap: left promiscuous mode [ 263.158040][ T9131] veth0_macvtap: left promiscuous mode [ 263.164063][ T9131] veth1_vlan: left promiscuous mode [ 263.170382][ T9131] veth0_vlan: left promiscuous mode [ 263.750157][ T9131] team0 (unregistering): Port device team_slave_1 removed [ 263.790086][ T9131] team0 (unregistering): Port device team_slave_0 removed [ 264.164752][T10344] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.174863][T10344] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 264.319160][T10344] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.334944][T10344] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 264.482027][T10344] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.505287][T10344] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 264.738337][ T155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.766308][ T155] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 264.828223][ T9134] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.840121][ T9134] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 264.888870][ T9134] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.905216][ T9134] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 264.956194][ T9131] IPVS: stop unused estimator thread 0... [ 264.972274][T10344] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.999565][T10344] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.090761][T10395] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1103'. [ 265.152131][T10344] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.232039][T10344] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.318278][T10344] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.337667][T10344] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.548557][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 265.581220][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 265.602093][T10401] wg2: left promiscuous mode [ 265.623244][T10401] wg2: left allmulticast mode [ 265.679780][T10408] netlink: 'syz.1.1109': attribute type 5 has an invalid length. [ 265.846568][T10418] Cannot find del_set index 4 as target [ 266.127327][T10427] lo speed is unknown, defaulting to 1000 [ 266.457218][T10412] xt_TCPMSS: Only works on TCP SYN packets [ 266.684566][T10440] lo speed is unknown, defaulting to 1000 [ 266.696682][T10427] lo speed is unknown, defaulting to 1000 [ 266.710159][T10445] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.720219][T10445] netlink: 'syz.0.1118': attribute type 3 has an invalid length. [ 266.728490][T10445] netlink: 'syz.0.1118': attribute type 2 has an invalid length. [ 266.741332][T10445] netlink: 'syz.0.1118': attribute type 2 has an invalid length. [ 267.048383][T10453] netlink: 'syz.0.1120': attribute type 3 has an invalid length. [ 267.070815][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 267.169860][T10458] ip6t_rpfilter: unknown options [ 267.366523][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1124'. [ 267.420198][T10440] lo speed is unknown, defaulting to 1000 [ 267.505365][T10472] syzkaller0: entered promiscuous mode [ 267.540669][T10472] syzkaller0: entered allmulticast mode [ 267.578979][T10467] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 267.586402][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 267.834418][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1128'. [ 268.168856][T10491] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 268.177493][T10491] netlink: 'syz.0.1132': attribute type 2 has an invalid length. [ 268.209935][T10494] netlink: 'syz.1.1133': attribute type 23 has an invalid length. [ 268.271523][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 268.915733][T10515] netlink: 'syz.4.1140': attribute type 6 has an invalid length. [ 269.141271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d9dbc00: rx timeout, send abort [ 269.307438][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 269.435588][T10533] netlink: 'syz.5.1146': attribute type 13 has an invalid length. [ 269.609002][T10536] bond4: option primary_reselect: invalid value (6) [ 269.630644][T10536] bond4 (unregistering): Released all slaves [ 269.641477][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807de80400: rx timeout, send abort [ 269.650095][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d9dbc00: abort rx timeout. Force session deactivation [ 269.707787][T10546] batadv_slave_0: entered promiscuous mode [ 269.781655][T10548] batadv_slave_0: left promiscuous mode [ 269.982785][T10557] veth1_to_bond: entered allmulticast mode [ 270.000709][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 270.149818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807de80400: abort rx timeout. Force session deactivation [ 270.183836][T10557] veth1_to_bond (unregistering): left allmulticast mode [ 270.284430][T10585] syzkaller0: entered promiscuous mode [ 270.290359][T10585] syzkaller0: entered allmulticast mode [ 270.509514][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 271.375013][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 271.419565][T10625] GUP no longer grows the stack in syz.1.1173 (10625): 200000003000-20000000a000 (200000001000) [ 271.431251][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.1.1173 Not tainted syzkaller #0 PREEMPT(full) [ 271.431280][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.431292][T10625] Call Trace: [ 271.431301][T10625] [ 271.431311][T10625] dump_stack_lvl+0x189/0x250 [ 271.431361][T10625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.431386][T10625] ? __pfx__printk+0x10/0x10 [ 271.431403][T10625] ? find_vma+0xe7/0x160 [ 271.431444][T10625] __get_user_pages+0x2470/0x2a00 [ 271.431476][T10625] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 271.431525][T10625] ? rcu_is_watching+0x15/0xb0 [ 271.431554][T10625] __gup_longterm_locked+0xde4/0x1660 [ 271.431587][T10625] ? try_grab_folio_fast+0x1bf/0x6a0 [ 271.431625][T10625] ? gup_fast_fallback+0x1b86/0x22d0 [ 271.431653][T10625] gup_fast_fallback+0x1d65/0x22d0 [ 271.431722][T10625] ? __pfx_gup_fast_fallback+0x10/0x10 [ 271.431746][T10625] ? __mutex_lock+0x335/0x1350 [ 271.431778][T10625] ? is_valid_gup_args+0x11f/0x200 [ 271.431805][T10625] ? get_user_pages_fast+0x4d/0xb0 [ 271.431832][T10625] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 271.431865][T10625] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 271.431893][T10625] ? wait_for_space+0x248/0x2d0 [ 271.431913][T10625] iov_iter_get_pages2+0x5e/0xa0 [ 271.431942][T10625] __se_sys_vmsplice+0x548/0x10d0 [ 271.431985][T10625] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 271.432005][T10625] ? __pfx_futex_wait+0x10/0x10 [ 271.432108][T10625] ? do_syscall_64+0xbe/0xfa0 [ 271.432133][T10625] do_syscall_64+0xfa/0xfa0 [ 271.432150][T10625] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.432170][T10625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.432188][T10625] ? clear_bhb_loop+0x60/0xb0 [ 271.432213][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.432231][T10625] RIP: 0033:0x7f9f2d78f6c9 [ 271.432249][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.432265][T10625] RSP: 002b:00007f9f2e578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 271.432288][T10625] RAX: ffffffffffffffda RBX: 00007f9f2d9e5fa0 RCX: 00007f9f2d78f6c9 [ 271.432301][T10625] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 271.432313][T10625] RBP: 00007f9f2d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.432326][T10625] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 271.432345][T10625] R13: 00007f9f2d9e6038 R14: 00007f9f2d9e5fa0 R15: 00007ffc708a1698 [ 271.432383][T10625] [ 271.475160][T10630] validate_nla: 1 callbacks suppressed [ 271.475179][T10630] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.712327][T10632] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.756535][T10635] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.775206][T10635] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.788544][T10635] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.830970][T10635] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 271.843917][T10635] netlink: 'syz.0.1174': attribute type 29 has an invalid length. [ 272.099023][T10659] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1181'. [ 272.142202][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1179'. [ 272.222074][T10667] lo speed is unknown, defaulting to 1000 [ 272.372940][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 272.422113][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 272.722653][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 272.808129][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 273.026962][T10667] lo speed is unknown, defaulting to 1000 [ 273.097993][T10705] xt_time: unknown flags 0xf4 [ 273.273625][T10710] lo speed is unknown, defaulting to 1000 [ 273.338894][T10714] netlink: 'syz.0.1194': attribute type 50 has an invalid length. [ 273.347512][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 273.362811][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 273.775167][T10710] lo speed is unknown, defaulting to 1000 [ 273.781463][T10711] lo speed is unknown, defaulting to 1000 [ 273.885966][T10729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1200'. [ 274.163990][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.221340][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.230380][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.243554][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.253547][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.262485][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.272457][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.281653][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.290887][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.300289][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.310139][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.320327][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.329001][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.371154][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.478840][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.535295][T10711] lo speed is unknown, defaulting to 1000 [ 274.610774][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.642729][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.747491][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.786682][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.805797][T10740] bond2: option mode: unable to set because the bond device has slaves [ 274.963396][T10740] bond2: option mode: unable to set because the bond device has slaves [ 275.003093][T10758] macvtap1: entered allmulticast mode [ 275.026184][T10758] dummy0: entered allmulticast mode [ 275.050861][T10758] dummy0: left allmulticast mode [ 275.189776][T10767] netlink: 'syz.4.1207': attribute type 29 has an invalid length. [ 275.474157][T10777] netlink: 'syz.5.1210': attribute type 13 has an invalid length. [ 275.701655][T10775] bond5: option min_links: invalid value (18446744073709551612) [ 275.745721][T10775] bond5: option min_links: allowed values 0 - 2147483647 [ 275.805624][T10775] bond5 (unregistering): Released all slaves [ 276.119485][T10777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.128504][T10777] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.144486][T10777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.211245][T10794] syzkaller1: entered promiscuous mode [ 276.217709][T10794] syzkaller1: entered allmulticast mode [ 277.096702][T10843] __nla_validate_parse: 5 callbacks suppressed [ 277.096721][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 277.312453][T10843] veth9: entered promiscuous mode [ 277.562837][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1225'. [ 277.725938][T10861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.751100][T10861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.144937][T10861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.164468][T10861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.190781][T10887] tipc: Enabled bearer , priority 0 [ 278.209783][T10892] syzkaller0: entered promiscuous mode [ 278.215542][T10892] syzkaller0: entered allmulticast mode [ 278.243349][T10885] tipc: Resetting bearer [ 278.291360][T10861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.308498][T10861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.377574][T10873] tipc: Resetting bearer [ 278.405641][T10873] tipc: Disabling bearer [ 278.483043][T10911] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 278.510099][T10861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.523729][T10911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.533368][T10861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.685529][T10914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.742044][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1234'. [ 278.790540][T10919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.819486][T10923] batadv1: entered promiscuous mode [ 278.844668][T10926] batadv1: entered promiscuous mode [ 278.992347][T10928] bond4 (unregistering): Released all slaves [ 279.001656][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 279.034837][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 279.050093][T10933] syzkaller0: entered promiscuous mode [ 279.060536][T10933] syzkaller0: entered allmulticast mode [ 279.219961][ T74] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.251112][ T74] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.328283][ T74] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.347559][ T74] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.422345][ T74] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.455820][ T74] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.503382][ T155] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.532905][ T155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.702018][T10957] validate_nla: 1 callbacks suppressed [ 279.702037][T10957] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 279.705318][T10954] lo speed is unknown, defaulting to 1000 [ 279.716039][T10957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1243'. [ 279.753798][T10959] netlink: 'syz.1.1242': attribute type 4 has an invalid length. [ 280.211359][T10954] lo speed is unknown, defaulting to 1000 [ 280.452112][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 280.543997][T10975] lo speed is unknown, defaulting to 1000 [ 280.736161][T10986] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1251'. [ 280.907311][ T144] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.918279][ T144] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 280.927070][ T144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.937909][ T144] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.106137][ T144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.114732][ T144] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.123549][ T144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.138290][ T144] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.150212][T10975] lo speed is unknown, defaulting to 1000 [ 281.671193][T11000] lo speed is unknown, defaulting to 1000 [ 282.398628][T11010] x_tables: duplicate underflow at hook 1 [ 282.957848][T11000] lo speed is unknown, defaulting to 1000 [ 283.637532][T11034] lo speed is unknown, defaulting to 1000 [ 284.179951][T11053] sctp: [Deprecated]: syz.0.1265 (pid 11053) Use of int in max_burst socket option. [ 284.179951][T11053] Use struct sctp_assoc_value instead [ 284.473276][T11034] lo speed is unknown, defaulting to 1000 [ 284.612291][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 284.621570][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1270'. [ 284.809985][T11078] syzkaller1: entered promiscuous mode [ 284.831160][T11078] syzkaller1: entered allmulticast mode [ 285.216893][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.227140][T11098] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.256834][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 285.591372][T11110] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1280'. [ 285.606189][T11110] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1280'. [ 285.623485][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1280'. [ 285.757995][T11113] netlink: 'syz.4.1281': attribute type 63 has an invalid length. [ 285.767812][T11113] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1281'. [ 285.805463][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 286.321588][T11127] lo speed is unknown, defaulting to 1000 [ 286.642646][T11127] lo speed is unknown, defaulting to 1000 [ 286.731689][T11136] netlink: 'syz.0.1287': attribute type 22 has an invalid length. [ 287.124372][ T5900] IPVS: starting estimator thread 0... [ 287.237024][T11152] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.294114][T11151] lo speed is unknown, defaulting to 1000 [ 287.976033][T11185] batadv_slave_0: entered promiscuous mode [ 287.996567][T11185] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 287.997305][T11182] netlink: 'syz.0.1296': attribute type 5 has an invalid length. [ 288.536574][T11151] lo speed is unknown, defaulting to 1000 [ 289.104831][T11223] netlink: 'syz.0.1307': attribute type 4 has an invalid length. [ 289.336679][T11202] lo speed is unknown, defaulting to 1000 [ 290.585442][T11276] __nla_validate_parse: 5 callbacks suppressed [ 290.585464][T11276] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1316'. [ 290.760177][T11276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.312627][T11246] lo speed is unknown, defaulting to 1000 [ 291.321131][T11202] lo speed is unknown, defaulting to 1000 [ 292.017322][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 292.151139][T11246] lo speed is unknown, defaulting to 1000 [ 292.309094][T11317] tipc: Enabled bearer , priority 10 [ 292.429653][T11321] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 292.495152][T11324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1331'. [ 292.867225][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 293.031342][T11339] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.161815][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1338'. [ 293.415800][T11352] dvmrp1: entered allmulticast mode [ 293.545823][ T5978] tipc: Node number set to 592783911 [ 294.006980][T11373] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 294.135096][T11378] netlink: 'syz.1.1349': attribute type 6 has an invalid length. [ 294.450425][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1353'. [ 294.570075][T11397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1355'. [ 294.582914][T11397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1355'. [ 294.593625][T11401] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1357'. [ 294.636651][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 294.660617][T11401] netlink: 'syz.2.1357': attribute type 12 has an invalid length. [ 295.390694][T11437] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 295.442895][T11437] syzkaller0: entered promiscuous mode [ 295.449234][T11437] syzkaller0: entered allmulticast mode [ 296.055470][T11471] lo speed is unknown, defaulting to 1000 [ 296.198048][T11480] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.226608][T11480] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.378689][T11480] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.440463][T11480] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.962627][ T5908] lo speed is unknown, defaulting to 1000 [ 296.970294][ T5908] syz0: Port: 1 Link DOWN [ 296.979281][T11480] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.989538][T11480] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.015447][T11471] lo speed is unknown, defaulting to 1000 [ 297.021605][ T9134] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.035184][ T9134] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.093393][ T5908] lo speed is unknown, defaulting to 1000 [ 297.093499][ T9134] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.126146][ T9134] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.154147][T11480] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.171665][T11480] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.198464][T11508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.370286][T11512] lo speed is unknown, defaulting to 1000 [ 297.455469][ T9134] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.468491][ T9134] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.532145][ T9134] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.551787][ T9134] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.614531][ T9134] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.624787][ T9134] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.676097][ T9134] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.684417][ T9134] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.738857][T11528] __nla_validate_parse: 5 callbacks suppressed [ 297.738878][T11528] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1390'. [ 297.776296][T11528] netlink: 'syz.5.1390': attribute type 9 has an invalid length. [ 297.784078][T11528] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1390'. [ 297.793308][T11528] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1390'. [ 297.878606][T11524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.888143][T11524] bond0: (slave bond5): Enslaving as an active interface with an up link [ 297.922514][T11515] lo speed is unknown, defaulting to 1000 [ 297.991927][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1392'. [ 298.023809][T11512] lo speed is unknown, defaulting to 1000 [ 298.276669][T11545] netlink: 'syz.0.1395': attribute type 9 has an invalid length. [ 298.296428][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 298.314375][T11545] macvlan2: entered promiscuous mode [ 298.320519][T11545] macvlan2: entered allmulticast mode [ 298.386880][T11549] netlink: 'syz.5.1396': attribute type 1 has an invalid length. [ 298.713036][ T155] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.723413][ T155] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.736357][ T5878] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.808710][T11515] lo speed is unknown, defaulting to 1000 [ 298.936450][ T5878] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.106282][ T5878] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 299.304479][T11569] lo speed is unknown, defaulting to 1000 [ 299.307127][T11584] x_tables: unsorted underflow at hook 2 [ 299.401862][T11580] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1405'. [ 299.473600][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1405'. [ 299.484877][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 299.757685][T11569] lo speed is unknown, defaulting to 1000 [ 300.893326][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 301.700566][T11644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.734873][T11647] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 301.826989][T11644] atomic_op ffff88807bb2b998 conn xmit_atomic 0000000000000000 [ 301.905402][T11656] netlink: 'syz.4.1424': attribute type 8 has an invalid length. [ 302.208030][T11681] sctp: [Deprecated]: syz.5.1428 (pid 11681) Use of int in max_burst socket option deprecated. [ 302.208030][T11681] Use struct sctp_assoc_value instead [ 302.208030][T11678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 302.321927][T11690] batadv_slave_0: entered promiscuous mode [ 302.390441][T11697] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 302.398995][T11697] netlink: 'syz.1.1432': attribute type 2 has an invalid length. [ 303.066250][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.125754][T11685] batadv_slave_0: left promiscuous mode [ 303.480767][T11724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.480769][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.579465][T11732] sctp: [Deprecated]: syz.5.1442 (pid 11732) Use of int in max_burst socket option deprecated. [ 303.579465][T11732] Use struct sctp_assoc_value instead [ 303.826787][T11743] netlink: 'syz.5.1443': attribute type 10 has an invalid length. [ 303.831330][T11747] netlink: 'syz.4.1440': attribute type 32 has an invalid length. [ 303.843304][T11747] __nla_validate_parse: 6 callbacks suppressed [ 303.843325][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 303.862721][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'. [ 303.869047][T11743] team0: Port device dummy0 added [ 303.912104][T11743] netlink: 'syz.5.1443': attribute type 10 has an invalid length. [ 303.997953][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 304.048459][T11747] bond5: option coupled_control: invalid value (29) [ 304.057030][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 304.110739][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 305.085151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055195c00: rx timeout, send abort [ 305.094161][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055195c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.742681][T11747] bond5 (unregistering): Released all slaves [ 306.788564][T11743] team0: Port device dummy0 removed [ 306.819404][T11743] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.171888][T11776] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.193728][T11776] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.235295][T11778] netlink: 'syz.0.1452': attribute type 2 has an invalid length. [ 307.285654][T11776] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.317141][T11776] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.413281][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 307.459532][T11776] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.474879][T11776] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.498164][T11794] tipc: Enabled bearer , priority 10 [ 307.693630][T11776] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.704590][T11776] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 307.845222][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 308.022116][ T9141] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.032140][ T9141] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.081211][ T155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.090130][ T155] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.126651][ T9141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.145577][ T9141] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.175848][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1467'. [ 308.215750][ T155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.225187][T11832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.234763][ T155] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.400019][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'. [ 308.541704][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1473'. [ 308.607182][T11850] lo speed is unknown, defaulting to 1000 [ 308.972814][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 308.976538][T11850] lo speed is unknown, defaulting to 1000 [ 310.311410][T11900] lo speed is unknown, defaulting to 1000 [ 310.644527][T11900] lo speed is unknown, defaulting to 1000 [ 311.107325][T11925] tipc: Enabled bearer , priority 0 [ 311.142211][T11925] syzkaller0: entered promiscuous mode [ 311.156673][T11925] syzkaller0: entered allmulticast mode [ 311.247258][T11929] tipc: Resetting bearer [ 311.293815][T11929] tipc: Disabling bearer [ 311.757301][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 311.867313][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 312.184307][T11960] lo speed is unknown, defaulting to 1000 [ 312.554943][T11976] IPVS: Error connecting to the multicast addr [ 312.597922][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 313.013370][T11969] lo speed is unknown, defaulting to 1000 [ 313.013370][T11960] lo speed is unknown, defaulting to 1000 [ 313.061301][T11996] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 313.144114][T11992] bond5: ARP target 9.0.0.0 is already present [ 313.175161][T11992] bond5: option arp_ip_target: invalid value (9) [ 313.210048][T11992] bond5 (unregistering): Released all slaves [ 313.593314][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 313.885925][T12018] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 313.907583][T11969] lo speed is unknown, defaulting to 1000 [ 314.071758][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1515'. [ 314.123188][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1515'. [ 314.993235][T12051] netlink: 'syz.5.1520': attribute type 1 has an invalid length. [ 315.014723][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1520'. [ 315.623383][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'. [ 315.789023][T12061] vlan2: entered promiscuous mode [ 315.812937][T12061] vlan2: entered allmulticast mode [ 315.819368][T12061] hsr_slave_1: entered allmulticast mode [ 316.743426][T12088] lo speed is unknown, defaulting to 1000 [ 316.876414][T12091] netlink: 'syz.5.1528': attribute type 3 has an invalid length. [ 316.993385][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.573934][T12088] lo speed is unknown, defaulting to 1000 [ 317.929841][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1532'. [ 317.976340][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1532'. [ 317.988890][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1532'. [ 318.079063][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 318.241569][ T9141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.259556][ T9141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.296586][ T9141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.329724][ T9141] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.665949][T12137] bridge0: entered allmulticast mode [ 318.743755][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 319.565627][T12155] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1541'. [ 319.941086][T12164] tipc: Disabling bearer [ 319.949421][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 320.445352][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 320.639408][T12211] netlink: zone id is out of range [ 320.644728][T12211] netlink: del zone limit has 4 unknown bytes [ 320.906951][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 321.084066][T12226] bond0: (slave team0): Releasing backup interface [ 321.116794][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.130164][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 321.145412][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.168685][T12226] bond0: (slave bond_slave_0): Releasing backup interface [ 321.213083][T12226] bond0: (slave bond_slave_1): Releasing backup interface [ 321.230557][T12226] team0: Port device team_slave_0 removed [ 321.238834][T12226] team0: Port device team_slave_1 removed [ 321.245435][T12226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.254742][T12226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.284613][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1564'. [ 321.754331][T12264] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 322.053409][T12253] netlink: 'syz.1.1568': attribute type 30 has an invalid length. [ 322.390882][T12253] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 322.580219][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 322.608179][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 322.753644][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 322.777618][T12297] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1575'. [ 322.783115][T12292] lo speed is unknown, defaulting to 1000 [ 322.908694][T12294] syz.4.1579: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.954716][T12294] CPU: 1 UID: 0 PID: 12294 Comm: syz.4.1579 Not tainted syzkaller #0 PREEMPT(full) [ 322.954755][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.954768][T12294] Call Trace: [ 322.954777][T12294] [ 322.954786][T12294] dump_stack_lvl+0x189/0x250 [ 322.954835][T12294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.954862][T12294] ? __pfx__printk+0x10/0x10 [ 322.954884][T12294] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.954910][T12294] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.954938][T12294] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 322.954966][T12294] warn_alloc+0x214/0x310 [ 322.955001][T12294] ? __pfx_warn_alloc+0x10/0x10 [ 322.955040][T12294] ? __get_vm_area_node+0x28f/0x300 [ 322.955068][T12294] ? xskq_create+0xbf/0x170 [ 322.955101][T12294] __vmalloc_node_range_noprof+0x690/0x12d0 [ 322.955165][T12294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.955198][T12294] ? __kasan_kmalloc+0x93/0xb0 [ 322.955224][T12294] vmalloc_user_noprof+0xad/0xf0 [ 322.955252][T12294] ? xskq_create+0xbf/0x170 [ 322.955281][T12294] xskq_create+0xbf/0x170 [ 322.955312][T12294] xsk_init_queue+0xb0/0x110 [ 322.955342][T12294] xsk_setsockopt+0x57b/0x8d0 [ 322.955373][T12294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.955403][T12294] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.955434][T12294] ? aa_sock_opt_perm+0xff/0x1b0 [ 322.955466][T12294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 322.955485][T12294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.955514][T12294] do_sock_setsockopt+0x17c/0x1b0 [ 322.955542][T12294] __x64_sys_setsockopt+0x13f/0x1b0 [ 322.955571][T12294] do_syscall_64+0xfa/0xfa0 [ 322.955589][T12294] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.955609][T12294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.955628][T12294] ? clear_bhb_loop+0x60/0xb0 [ 322.955652][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.955671][T12294] RIP: 0033:0x7f34c9f8f6c9 [ 322.955688][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.955704][T12294] RSP: 002b:00007f34cae07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.955726][T12294] RAX: ffffffffffffffda RBX: 00007f34ca1e5fa0 RCX: 00007f34c9f8f6c9 [ 322.955740][T12294] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 322.955761][T12294] RBP: 00007f34ca011f91 R08: 0000000000000004 R09: 0000000000000000 [ 322.955773][T12294] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 322.955785][T12294] R13: 00007f34ca1e6038 R14: 00007f34ca1e5fa0 R15: 00007ffe3b03c7a8 [ 322.955822][T12294] [ 322.955853][T12294] Mem-Info: [ 323.256354][T12294] active_anon:6291 inactive_anon:0 isolated_anon:0 [ 323.256354][T12294] active_file:3273 inactive_file:39975 isolated_file:0 [ 323.256354][T12294] unevictable:768 dirty:125 writeback:0 [ 323.256354][T12294] slab_reclaimable:11907 slab_unreclaimable:149865 [ 323.256354][T12294] mapped:29137 shmem:1358 pagetables:1485 [ 323.256354][T12294] sec_pagetables:0 bounce:0 [ 323.256354][T12294] kernel_misc_reclaimable:0 [ 323.256354][T12294] free:1154247 free_pcp:40611 free_cma:0 [ 323.341194][T12294] Node 0 active_anon:25064kB inactive_anon:0kB active_file:13092kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116548kB dirty:500kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.484086][T12294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.575954][T12294] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.662954][T12294] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 323.684476][T12294] Node 0 DMA32 free:730732kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25064kB inactive_anon:0kB active_file:13092kB inactive_file:159696kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:151272kB local_pcp:61012kB free_cma:0kB [ 323.776814][T12294] lowmem_reserve[]: 0 0 0 0 0 [ 323.781653][T12294] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.858738][T12326] sctp: [Deprecated]: syz.5.1584 (pid 12326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.858738][T12326] Use struct sctp_sack_info instead [ 323.905090][T12294] lowmem_reserve[]: 0 0 0 0 0 [ 323.910187][T12294] Node 1 Normal free:3896740kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13664kB local_pcp:6400kB free_cma:0kB [ 323.940750][T12292] lo speed is unknown, defaulting to 1000 [ 323.987100][T12294] lowmem_reserve[]: 0 0 0 0 0 [ 323.997725][T12294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.028642][T12294] Node 0 DMA32: 3428*4kB (UM) 729*8kB (UM) 277*16kB (UM) 582*32kB (UME) 314*64kB (UME) 212*128kB (UME) 145*256kB (UME) 70*512kB (UME) 19*1024kB (UM) 4*2048kB (UME) 140*4096kB (M) = 763880kB [ 324.065234][T12334] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 324.080498][T12334] netlink: 'syz.2.1587': attribute type 18 has an invalid length. [ 324.088687][T12294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 324.113610][T12294] Node 1 Normal: 179*4kB (UME) 69*8kB (UME) 37*16kB (UME) 153*32kB (UME) 41*64kB (UME) 8*128kB (UM) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3896740kB [ 324.145540][T12294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.156873][T12294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.167425][T12294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.177452][T12294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.190041][T12294] 44602 total pagecache pages [ 324.194867][T12294] 0 pages in swap cache [ 324.217066][T12294] Free swap = 124996kB [ 324.225955][T12294] Total swap = 124996kB [ 324.236481][T12294] 2097051 pages RAM [ 324.244910][T12294] 0 pages HighMem/MovableOnly [ 324.257738][T12294] 424132 pages reserved [ 324.267325][T12294] 0 pages cma reserved [ 326.331516][T12383] netlink: 'syz.5.1600': attribute type 9 has an invalid length. [ 326.344238][T12381] tipc: Enabled bearer , priority 0 [ 326.450255][T12380] tipc: Disabling bearer [ 326.478494][T12390] netlink: 'syz.5.1600': attribute type 9 has an invalid length. [ 327.043187][T12405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.050496][T12405] IPv6: NLM_F_CREATE should be set when creating new route [ 327.057784][T12405] IPv6: NLM_F_CREATE should be set when creating new route [ 327.107759][T12421] ip6gre1: entered promiscuous mode [ 327.376839][T12431] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.697964][T12438] __nla_validate_parse: 4 callbacks suppressed [ 327.697986][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 327.773874][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 327.860343][T12441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 327.877857][T12441] nbd: device at index 64 is going down [ 327.941143][T12444] netlink: 'syz.1.1616': attribute type 3 has an invalid length. [ 327.966570][T12451] wg2: entered promiscuous mode [ 327.971924][T12451] wg2: entered allmulticast mode [ 327.979401][ T9141] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.996310][ T9141] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.013929][ T9141] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.025299][ T9141] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.061502][T12456] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 328.148368][T12456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.198851][T12462] bond5: (slave veth3): Enslaving as an active interface with a down link [ 328.212611][T12461] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1622'. [ 328.223180][T12461] netlink: 'syz.5.1622': attribute type 33 has an invalid length. [ 328.231215][T12461] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1622'. [ 328.248345][T12464] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 328.249121][T12456] vlan1: entered allmulticast mode [ 328.259991][T12456] veth1: entered allmulticast mode [ 328.267309][T12456] bond5: (slave vlan1): Opening slave failed [ 328.426827][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 328.561236][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 328.671664][T12481] lo speed is unknown, defaulting to 1000 [ 328.691281][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 328.997608][T12481] lo speed is unknown, defaulting to 1000 [ 329.536732][T12517] wg2: left promiscuous mode [ 329.541389][T12517] wg2: left allmulticast mode [ 329.573547][T12517] vlan2: left promiscuous mode [ 329.579773][T12517] vlan2: left allmulticast mode [ 329.584895][T12517] hsr_slave_1: left allmulticast mode [ 329.789354][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 330.023220][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 330.088858][T12543] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 330.273272][ T5823] Bluetooth: hci0: command tx timeout [ 330.524499][T12559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.531792][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 330.539148][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 330.546380][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 330.553764][T12560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.734988][T12570] sctp: [Deprecated]: syz.1.1649 (pid 12570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.734988][T12570] Use struct sctp_sack_info instead [ 330.757505][T12573] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 332.384109][T12577] lo speed is unknown, defaulting to 1000 [ 332.701104][T12607] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 332.787550][T12577] lo speed is unknown, defaulting to 1000 [ 332.891611][T12613] lo speed is unknown, defaulting to 1000 [ 332.940030][T12618] __nla_validate_parse: 66 callbacks suppressed [ 332.940051][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 333.237380][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'. [ 333.444228][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'. [ 333.460618][T12613] lo speed is unknown, defaulting to 1000 [ 333.515304][T12629] macsec1: entered promiscuous mode [ 333.526122][T12629] macsec1: entered allmulticast mode [ 334.639566][T12687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'. [ 334.657531][T12688] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 334.708690][T12681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.932278][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'. [ 335.219401][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 335.240147][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 335.269345][T12716] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1684'. [ 335.511292][T12726] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 335.616511][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 335.792103][T12726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.264849][T12750] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1691'. [ 336.759775][T12776] raw_sendmsg: syz.0.1696 forgot to set AF_INET. Fix it! [ 336.866693][T12779] bond0: (slave dummy0): Releasing backup interface [ 336.887834][T12779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.154497][T12827] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 337.682799][T12852] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 337.835815][T12860] Cannot find del_set index 2 as target [ 338.003938][T12869] __nla_validate_parse: 3 callbacks suppressed [ 338.003960][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1717'. [ 338.080448][T12871] tipc: Enabling of bearer rejected, failed to enable media [ 338.177476][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 338.187104][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 338.257584][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1721'. [ 338.458972][T12889] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1725'. [ 338.476641][T12891] lo speed is unknown, defaulting to 1000 [ 338.786499][T12891] lo speed is unknown, defaulting to 1000 [ 339.110915][T12917] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 339.122692][T12917] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1732'. [ 339.144584][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 339.355752][T12927] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1738'. [ 339.710093][T12945] netlink: 'syz.0.1741': attribute type 14 has an invalid length. [ 339.758878][T12950] IPVS: length: 242 != 24 [ 340.092432][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1748'. [ 340.143007][T12967] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 340.385686][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1751'. [ 340.395174][T12977] netem: change failed [ 340.645022][T12987] syzkaller1: entered promiscuous mode [ 340.651443][T12987] syzkaller1: entered allmulticast mode [ 340.818886][T12996] lo speed is unknown, defaulting to 1000 [ 340.828497][T13001] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 341.293189][T12996] lo speed is unknown, defaulting to 1000 [ 341.650192][T13044] netlink: 'syz.4.1772': attribute type 13 has an invalid length. [ 341.658377][T13044] netlink: 'syz.4.1772': attribute type 17 has an invalid length. [ 341.763736][T13044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.713311][T13074] lo speed is unknown, defaulting to 1000 [ 342.803687][T13081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.057542][T12821] syzkaller0: tun_net_xmit 76 [ 343.076501][T12821] syzkaller0: tun_net_xmit 48 [ 343.086330][ T5978] syzkaller0: tun_net_xmit 76 [ 343.150715][T13092] IPVS: Scheduler module ip_vs_sip not found [ 343.326297][ T5978] syzkaller0: tun_net_xmit 76 [ 343.431821][T13104] netlink: 'syz.5.1789': attribute type 8 has an invalid length. [ 343.567189][T13110] openvswitch: netlink: Unknown nsh attribute 0 [ 343.573706][T13110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.033138][T13074] lo speed is unknown, defaulting to 1000 [ 345.162088][T13118] netlink: 'syz.5.1794': attribute type 1 has an invalid length. [ 345.191077][T13118] __nla_validate_parse: 9 callbacks suppressed [ 345.191100][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 345.205587][T13122] netlink: 'syz.4.1793': attribute type 3 has an invalid length. [ 345.238070][T13118] veth4: entered allmulticast mode [ 345.424165][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1796'. [ 345.499104][T13132] lo speed is unknown, defaulting to 1000 [ 346.063994][T13151] netlink: 'syz.4.1801': attribute type 11 has an invalid length. [ 346.072917][T13151] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1801'. [ 346.098978][T13153] netlink: 'syz.4.1801': attribute type 11 has an invalid length. [ 346.116476][T13153] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1801'. [ 346.245038][T13132] lo speed is unknown, defaulting to 1000 [ 346.624664][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 346.640003][T13159] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1803'. [ 346.649369][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 346.658807][T13159] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1803'. [ 346.889862][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 346.913914][T13176] netlink: 'syz.4.1807': attribute type 3 has an invalid length. [ 346.933747][T13176] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1807'. [ 347.413411][T13191] team0: Device gtp0 is up. Set it down before adding it as a team port [ 347.562062][T13195] tipc: Enabled bearer , priority 0 [ 347.614078][T13195] syzkaller0: entered promiscuous mode [ 347.625577][T13195] syzkaller0: entered allmulticast mode [ 347.687314][T13195] tipc: Resetting bearer [ 347.726683][T13206] syzkaller0: entered promiscuous mode [ 347.732361][T13206] syzkaller0: entered allmulticast mode [ 347.755508][T13210] sctp: [Deprecated]: syz.2.1814 (pid 13210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.755508][T13210] Use struct sctp_sack_info instead [ 348.204864][T13220] netlink: 'syz.5.1822': attribute type 30 has an invalid length. [ 348.262253][T13220] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 348.278754][T13220] bond5 (unregistering): Released all slaves [ 348.322065][T13238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.374966][T13194] tipc: Resetting bearer [ 348.426913][T13194] tipc: Disabling bearer [ 348.623407][T13259] vlan0: entered allmulticast mode [ 348.635772][T13259] bridge_slave_0: entered allmulticast mode [ 349.072735][T13290] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 349.085742][T13290] bond5 (unregistering): Released all slaves [ 349.382510][T13304] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 349.451751][T13308] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 349.467231][T13308] bond7 (unregistering): Released all slaves [ 349.535327][T13307] veth0_to_hsr: entered promiscuous mode [ 349.567266][T13307] veth0_to_hsr: entered allmulticast mode [ 349.592583][T13307] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 349.661094][T13323] netlink: 'syz.1.1845': attribute type 8 has an invalid length. [ 350.384469][T13363] netlink: 'syz.4.1858': attribute type 13 has an invalid length. [ 350.403034][T13363] netlink: 'syz.4.1858': attribute type 17 has an invalid length. [ 350.463811][T13363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.514712][T13371] : entered promiscuous mode [ 350.602657][T13363] lo speed is unknown, defaulting to 1000 [ 350.714902][T13383] __nla_validate_parse: 9 callbacks suppressed [ 350.714924][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.751766][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.775242][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.806474][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.815488][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.854778][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.867578][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.879081][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.900345][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1864'. [ 350.913821][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1868'. [ 351.134961][T13363] lo speed is unknown, defaulting to 1000 [ 351.532758][T13421] lo speed is unknown, defaulting to 1000 [ 351.894233][T13421] lo speed is unknown, defaulting to 1000 [ 352.186203][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 353.581355][T13488] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 353.935151][T13501] chnl_net:caif_netlink_parms(): no params data found [ 353.992799][T13508] chnl_net:caif_netlink_parms(): no params data found [ 354.438796][T13533] netlink: 'syz.4.1904': attribute type 10 has an invalid length. [ 354.536635][T13538] netlink: 'syz.4.1904': attribute type 10 has an invalid length. [ 354.551935][T13530] lo speed is unknown, defaulting to 1000 [ 354.604537][T13538] bridge0: port 1(batadv0) entered blocking state [ 354.644889][T13538] bridge0: port 1(batadv0) entered disabled state [ 354.724882][T13538] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 355.129317][T13561] pimreg3: entered allmulticast mode [ 355.462259][T13531] lo speed is unknown, defaulting to 1000 [ 355.563033][T13530] lo speed is unknown, defaulting to 1000 [ 355.697000][T13581] macsec2: entered promiscuous mode [ 355.706923][T13581] macsec2: entered allmulticast mode [ 356.091625][T13531] lo speed is unknown, defaulting to 1000 [ 356.099225][T13598] __nla_validate_parse: 153 callbacks suppressed [ 356.099246][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1923'. [ 356.139083][T13600] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 356.502652][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1928'. [ 356.849070][T13627] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 356.862083][T13627] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 356.979881][T13627] tipc: Enabling of bearer rejected, failed to enable media [ 357.584581][T13647] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.1937'. [ 357.637657][T13647] netlink: 'syz.2.1937': attribute type 27 has an invalid length. [ 357.645740][T13647] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 357.666403][T13647] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1937'. [ 357.739142][T13649] netlink: 'syz.1.1938': attribute type 6 has an invalid length. [ 357.748780][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1938'. [ 357.895141][T13652] tipc: Enabled bearer , priority 0 [ 357.902682][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'. [ 358.083991][T13655] tipc: Resetting bearer [ 358.405183][T13676] pimreg: entered allmulticast mode [ 358.433495][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 358.479032][T13675] syzkaller0: entered promiscuous mode [ 358.484737][T13675] syzkaller0: entered allmulticast mode [ 358.547321][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 358.887851][T13700] lo speed is unknown, defaulting to 1000 [ 358.936364][ T5908] tipc: Node number set to 2186436323 [ 358.980604][T13714] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1957'. [ 359.027949][T13714] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1957'. [ 359.174023][T13726] syz_tun: entered allmulticast mode [ 359.211453][T13725] dvmrp6: entered allmulticast mode [ 359.226507][T13717] syzkaller0: entered promiscuous mode [ 359.247232][T13717] syzkaller0: entered allmulticast mode [ 359.527043][T13700] lo speed is unknown, defaulting to 1000 [ 359.913260][T13765] tipc: Enabling of bearer rejected, failed to enable media [ 360.318138][T13794] netlink: 'syz.2.1978': attribute type 13 has an invalid length. [ 360.328350][T13794] netlink: 'syz.2.1978': attribute type 17 has an invalid length. [ 360.778277][T13814] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 361.479651][T13858] bridge0: entered allmulticast mode [ 361.490547][T13860] __nla_validate_parse: 8 callbacks suppressed [ 361.490571][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 361.510603][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 361.562176][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 361.571509][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1996'. [ 361.635307][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 361.642029][T13860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.745705][T13860] syzkaller0: entered promiscuous mode [ 361.753040][T13860] syzkaller0: entered allmulticast mode [ 361.895177][T13892] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2006'. [ 361.931215][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 362.032784][T13892] team1: entered promiscuous mode [ 362.045346][T13892] team1: entered allmulticast mode [ 362.051340][T13892] 8021q: adding VLAN 0 to HW filter on device team1 [ 362.156284][T13900] lo: entered allmulticast mode [ 362.190255][T13900] lo: left allmulticast mode [ 362.249051][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'. [ 362.371326][T13908] lo speed is unknown, defaulting to 1000 [ 362.791658][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 362.815563][T13937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2018'. [ 363.445079][T13971] bond7: option arp_interval: invalid value (18446744073709551615) [ 363.463236][T13971] bond7: option arp_interval: allowed values 0 - 2147483647 [ 363.490837][T13971] bond7 (unregistering): Released all slaves [ 363.572183][T13914] lo speed is unknown, defaulting to 1000 [ 363.637769][T13908] lo speed is unknown, defaulting to 1000 [ 363.671187][T13986] xt_time: unknown flags 0xf4 [ 364.086979][T13999] dummy0: entered allmulticast mode [ 364.149126][T13998] dummy0: left allmulticast mode [ 364.179651][T13975] lo speed is unknown, defaulting to 1000 [ 364.555182][T14002] lo speed is unknown, defaulting to 1000 [ 364.731855][T13914] lo speed is unknown, defaulting to 1000 [ 364.984258][T14022] netlink: 'syz.4.2038': attribute type 16 has an invalid length. [ 365.196247][T14004] lo speed is unknown, defaulting to 1000 [ 365.222665][T13975] lo speed is unknown, defaulting to 1000 [ 365.844048][T14002] lo speed is unknown, defaulting to 1000 [ 366.419807][T14004] lo speed is unknown, defaulting to 1000 [ 367.414174][T14062] lo speed is unknown, defaulting to 1000 [ 367.755907][T14069] __nla_validate_parse: 96 callbacks suppressed [ 367.755932][T14069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2051'. [ 368.569458][T14062] lo speed is unknown, defaulting to 1000 [ 368.583300][T14087] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 368.878733][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 368.904384][T14094] lo speed is unknown, defaulting to 1000 [ 368.947734][T14097] tipc: Started in network mode [ 368.980505][T14097] tipc: Node identity ea93304baf5, cluster identity 4711 [ 369.006111][T14097] tipc: Enabled bearer , priority 0 [ 369.021596][T14098] syzkaller0: entered promiscuous mode [ 369.028748][T14098] syzkaller0: entered allmulticast mode [ 369.093879][T14097] tipc: Resetting bearer [ 369.160085][T14096] tipc: Resetting bearer [ 369.202371][T14096] tipc: Disabling bearer [ 369.359936][T14094] lo speed is unknown, defaulting to 1000 [ 369.700232][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2062'. [ 369.710855][T14115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2062'. [ 369.770635][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2062'. [ 370.275619][T14122] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 370.336496][T14122] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2064'. [ 370.349476][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 370.379200][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 370.487772][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 370.509816][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 370.567185][T14127] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.637206][T14133] ip6gretap1: entered promiscuous mode [ 370.649850][T14133] ip6gretap1: entered allmulticast mode [ 370.848683][T14127] bond5: entered allmulticast mode [ 370.858749][T14127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.878628][T14127] team0: Port device bond5 added [ 371.028155][T14162] netlink: 'syz.4.2074': attribute type 5 has an invalid length. [ 371.718754][T14190] sctp: [Deprecated]: syz.5.2083 (pid 14190) Use of int in maxseg socket option. [ 371.718754][T14190] Use struct sctp_assoc_value instead [ 371.834437][T14194] netlink: 'syz.1.2085': attribute type 6 has an invalid length. [ 372.978816][T14230] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.095190][T14231] lo speed is unknown, defaulting to 1000 [ 373.104686][T14240] syzkaller0: entered promiscuous mode [ 373.117575][T14240] syzkaller0: entered allmulticast mode [ 373.210015][T14252] bond6: option ad_user_port_key: invalid value (65535) [ 373.226636][T14252] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 373.242065][T14252] bond6 (unregistering): Released all slaves [ 373.571978][T14239] lo speed is unknown, defaulting to 1000 [ 373.587372][T14231] lo speed is unknown, defaulting to 1000 [ 374.223586][T14239] lo speed is unknown, defaulting to 1000 [ 374.224533][T14266] lo speed is unknown, defaulting to 1000 [ 374.476519][T14275] x_tables: duplicate underflow at hook 4 [ 374.499384][T14275] netlink: 'syz.0.2103': attribute type 6 has an invalid length. [ 374.640375][T14282] xt_hashlimit: size too large, truncated to 1048576 [ 374.812249][T14266] lo speed is unknown, defaulting to 1000 [ 375.644663][T14310] __nla_validate_parse: 10 callbacks suppressed [ 375.644687][T14310] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2112'. [ 375.998193][T14322] syz.1.2116: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.049068][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.1.2116 Not tainted syzkaller #0 PREEMPT(full) [ 376.049098][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.049109][T14322] Call Trace: [ 376.049118][T14322] [ 376.049126][T14322] dump_stack_lvl+0x189/0x250 [ 376.049164][T14322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.049191][T14322] ? __pfx__printk+0x10/0x10 [ 376.049212][T14322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 376.049238][T14322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 376.049267][T14322] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 376.049296][T14322] warn_alloc+0x214/0x310 [ 376.049331][T14322] ? __pfx_warn_alloc+0x10/0x10 [ 376.049367][T14322] ? __get_vm_area_node+0x28f/0x300 [ 376.049394][T14322] ? translate_table+0x19b/0x2040 [ 376.049420][T14322] __vmalloc_node_range_noprof+0x690/0x12d0 [ 376.049482][T14322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.049509][T14322] ? translate_table+0x19b/0x2040 [ 376.049532][T14322] ? rcu_is_watching+0x15/0xb0 [ 376.049555][T14322] ? translate_table+0x19b/0x2040 [ 376.049574][T14322] __kvmalloc_node_noprof+0x674/0x910 [ 376.049604][T14322] ? translate_table+0x19b/0x2040 [ 376.049629][T14322] ? do_ip6t_set_ctl+0x88a/0xce0 [ 376.049645][T14322] ? nf_setsockopt+0x26f/0x290 [ 376.049670][T14322] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 376.049688][T14322] ? do_syscall_64+0xfa/0xfa0 [ 376.049715][T14322] translate_table+0x19b/0x2040 [ 376.049751][T14322] ? __lock_acquire+0xab9/0xd20 [ 376.049777][T14322] ? __pfx_translate_table+0x10/0x10 [ 376.049800][T14322] ? __might_fault+0xb0/0x130 [ 376.049849][T14322] ? _copy_from_user+0x94/0xb0 [ 376.049880][T14322] do_ip6t_set_ctl+0x970/0xce0 [ 376.049904][T14322] ? rcu_is_watching+0x15/0xb0 [ 376.049927][T14322] ? trace_contention_end+0x39/0x120 [ 376.049950][T14322] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 376.049998][T14322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.050032][T14322] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.050065][T14322] nf_setsockopt+0x26f/0x290 [ 376.050092][T14322] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.050123][T14322] do_sock_setsockopt+0x17c/0x1b0 [ 376.050149][T14322] __x64_sys_setsockopt+0x13f/0x1b0 [ 376.050177][T14322] do_syscall_64+0xfa/0xfa0 [ 376.050194][T14322] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.050212][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.050231][T14322] ? clear_bhb_loop+0x60/0xb0 [ 376.050255][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.050273][T14322] RIP: 0033:0x7f9f2d78f6c9 [ 376.050291][T14322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.050308][T14322] RSP: 002b:00007f9f2e557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.050330][T14322] RAX: ffffffffffffffda RBX: 00007f9f2d9e6090 RCX: 00007f9f2d78f6c9 [ 376.050345][T14322] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 376.050357][T14322] RBP: 00007f9f2d811f91 R08: 00000000000003f0 R09: 0000000000000000 [ 376.050370][T14322] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 376.050382][T14322] R13: 00007f9f2d9e6128 R14: 00007f9f2d9e6090 R15: 00007ffc708a1698 [ 376.050418][T14322] [ 376.050426][T14322] Mem-Info: [ 376.376631][T14322] active_anon:9969 inactive_anon:0 isolated_anon:0 [ 376.376631][T14322] active_file:3273 inactive_file:39997 isolated_file:0 [ 376.376631][T14322] unevictable:3840 dirty:123 writeback:0 [ 376.376631][T14322] slab_reclaimable:12437 slab_unreclaimable:177841 [ 376.376631][T14322] mapped:35658 shmem:7300 pagetables:1434 [ 376.376631][T14322] sec_pagetables:0 bounce:0 [ 376.376631][T14322] kernel_misc_reclaimable:0 [ 376.376631][T14322] free:1233984 free_pcp:12291 free_cma:0 [ 376.466187][T14322] Node 0 active_anon:39876kB inactive_anon:0kB active_file:13092kB inactive_file:159784kB unevictable:13824kB isolated(anon):0kB isolated(file):0kB mapped:142632kB dirty:488kB writeback:0kB shmem:27664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14128kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 376.558369][T14322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 376.618519][T14322] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.686090][T14322] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 376.730569][T14331] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 376.736150][T14322] Node 0 DMA32 free:1001904kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40032kB inactive_anon:0kB active_file:13092kB inactive_file:159784kB unevictable:13824kB writepending:488kB zspages:0kB present:3129332kB managed:2565108kB mlocked:12288kB bounce:0kB free_pcp:37848kB local_pcp:17792kB free_cma:0kB [ 376.757938][T14331] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 376.799708][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 376.804585][T14322] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.835230][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 376.841389][T14322] Node 1 Normal free:3898052kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12356kB local_pcp:5600kB free_cma:0kB [ 376.874123][T14322] lowmem_reserve[]: 0 0 0 0 0 [ 376.888147][T14322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.901465][T14322] Node 0 DMA32: 894*4kB (UM) 1721*8kB (UME) 1597*16kB (U) 889*32kB (UE) 628*64kB (UM) 531*128kB (UME) 447*256kB (UM) 254*512kB (UM) 116*1024kB (UM) 2*2048kB (ME) 113*4096kB (M) = 1009712kB [ 376.937008][T14322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.985180][T14322] Node 1 Normal: 179*4kB (UME) 69*8kB (UME) 37*16kB (UME) 182*32kB (UME) 47*64kB (UME) 8*128kB (UM) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3898052kB [ 377.004810][T14322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.014511][T14322] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 377.023887][T14322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.086034][T14322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.115853][T14322] 50566 total pagecache pages [ 377.149590][T14322] 0 pages in swap cache [ 377.153818][T14322] Free swap = 124996kB [ 377.176517][T14322] Total swap = 124996kB [ 377.181087][T14322] 2097051 pages RAM [ 377.184912][T14322] 0 pages HighMem/MovableOnly [ 377.227137][T14322] 424132 pages reserved [ 377.231500][T14322] 0 pages cma reserved [ 377.321061][T14347] netlink: 'syz.5.2120': attribute type 32 has an invalid length. [ 377.346415][T14347] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2120'. [ 377.403330][T14349] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2120'. [ 377.651470][T14359] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2125'. [ 378.252722][ T5823] Bluetooth: hci5: link tx timeout [ 378.260717][ T5823] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 378.401226][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 378.430941][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.443860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.455791][T14391] lo speed is unknown, defaulting to 1000 [ 378.537114][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 378.760449][T14397] lo speed is unknown, defaulting to 1000 [ 378.767518][T14391] lo speed is unknown, defaulting to 1000 [ 378.812428][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2136'. [ 378.841398][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2136'. [ 379.426911][T14416] block nbd1: server does not support multiple connections per device. [ 379.438562][T14416] block nbd1: shutting down sockets [ 379.457639][T14393] lo speed is unknown, defaulting to 1000 [ 379.556154][T14397] lo speed is unknown, defaulting to 1000 [ 379.649276][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2141'. [ 379.883166][T14431] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 379.895034][T14431] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 379.979474][T14437] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 379.990487][T14437] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 380.097288][T14444] netlink: 'syz.5.2145': attribute type 4 has an invalid length. [ 380.111650][T14444] netlink: 'syz.5.2145': attribute type 4 has an invalid length. [ 380.212271][T14419] lo speed is unknown, defaulting to 1000 [ 380.346358][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 380.505226][T14419] lo speed is unknown, defaulting to 1000 [ 380.614474][T14393] lo speed is unknown, defaulting to 1000 [ 380.628178][T14433] lo speed is unknown, defaulting to 1000 [ 381.183656][T14460] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 381.247474][T14433] lo speed is unknown, defaulting to 1000 [ 381.806418][T14470] netlink: 'syz.5.2150': attribute type 8 has an invalid length. [ 382.224571][T14477] sctp: [Deprecated]: syz.0.2152 (pid 14477) Use of int in max_burst socket option deprecated. [ 382.224571][T14477] Use struct sctp_assoc_value instead [ 382.696807][T14485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2153'. [ 382.964831][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 383.087364][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2156'. [ 383.138149][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 383.334701][T14508] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 383.409701][T14508] tipc: Enabled bearer , priority 0 [ 383.531821][T14504] tipc: Disabling bearer [ 383.821342][T14537] macsec3: entered allmulticast mode [ 383.836146][T14537] macsec0: entered allmulticast mode [ 383.893369][T14542] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 383.965659][T14542] ip6t_rpfilter: unknown options [ 384.063336][T14549] openvswitch: netlink: Flow key attr not present in new flow. [ 384.237105][T14555] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2170'. [ 384.253202][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 384.286910][T14558] lo speed is unknown, defaulting to 1000 [ 384.625644][T14558] lo speed is unknown, defaulting to 1000 [ 384.868243][T14575] bond0: (slave rose0): Releasing backup interface [ 384.882687][T14581] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 385.124842][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 385.274849][T14591] bond7: option ad_actor_sys_prio: invalid value (0) [ 385.282175][T14591] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 385.306580][T14591] bond7 (unregistering): Released all slaves [ 385.381136][T14606] netlink: 'syz.5.2180': attribute type 1 has an invalid length. [ 385.430163][T14602] tap0: tun_chr_ioctl cmd 1074025677 [ 385.435808][T14602] tap0: linktype set to 1 [ 385.817338][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'. [ 386.200539][T14636] lo speed is unknown, defaulting to 1000 [ 386.275325][T14641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2186'. [ 386.486125][T14646] netlink: 'syz.2.2187': attribute type 2 has an invalid length. [ 386.610173][T14646] !: entered promiscuous mode [ 405.225550][T14636] lo speed is unknown, defaulting to 1000 [ 405.335233][T14653] lo speed is unknown, defaulting to 1000 [ 420.314592][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.423155][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.523176][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.964593][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.133174][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.254382][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.423226][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.544591][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.793780][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 422.092651][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 422.173605][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.405252][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 422.473096][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.955494][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 423.313157][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.594082][ T5836] Bluetooth: hci4: command tx timeout [ 425.162040][ T5836] Bluetooth: hci6: command tx timeout [ 426.042712][ T5836] Bluetooth: hci7: command tx timeout [ 426.673181][ T5836] Bluetooth: hci4: command tx timeout [ 427.233476][ T5836] Bluetooth: hci6: command tx timeout [ 428.133156][ T5836] Bluetooth: hci7: command tx timeout [ 428.215627][T14697] lo speed is unknown, defaulting to 1000 [ 428.583649][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.712344][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.765064][ T5826] Bluetooth: hci4: command tx timeout [ 428.833555][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.334190][ T5826] Bluetooth: hci6: command tx timeout [ 429.422998][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.532772][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.163816][T14653] lo speed is unknown, defaulting to 1000 [ 430.222044][ T5826] Bluetooth: hci7: command tx timeout [ 430.832142][ T5826] Bluetooth: hci4: command tx timeout [ 431.402174][ T5826] Bluetooth: hci6: command tx timeout [ 432.273346][ T5826] Bluetooth: hci7: command tx timeout [ 432.434255][ T5826] Bluetooth: hci2: command tx timeout [ 434.513427][ T5826] Bluetooth: hci2: command tx timeout [ 435.893343][T14700] lo speed is unknown, defaulting to 1000 [ 436.594866][ T5826] Bluetooth: hci2: command tx timeout [ 438.672813][ T5826] Bluetooth: hci2: command tx timeout [ 439.954239][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.065271][T14697] lo speed is unknown, defaulting to 1000 [ 449.193267][T14725] netlink: 'syz.5.2201': attribute type 15 has an invalid length. [ 454.575482][T14701] lo speed is unknown, defaulting to 1000 [ 459.934628][T14737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.464130][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'. [ 467.094303][T14710] lo speed is unknown, defaulting to 1000 [ 475.475887][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.593079][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.724800][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.042388][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.064443][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 476.135228][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 476.372709][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 476.414057][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.203078][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 477.303431][T14710] lo speed is unknown, defaulting to 1000 [ 477.464213][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 479.153922][ T5836] Bluetooth: hci3: command tx timeout [ 479.955879][ T5836] Bluetooth: hci8: command tx timeout [ 481.255689][ T5835] Bluetooth: hci3: command tx timeout [ 481.262612][ T5826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 481.415013][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 481.545024][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 481.943876][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 482.054419][ T5826] Bluetooth: hci8: command tx timeout [ 482.105607][ T5146] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 482.372745][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 482.395478][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 482.524200][ T5826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 483.050579][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 483.394149][ T5146] Bluetooth: hci3: command tx timeout [ 483.434359][ T5146] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 484.114997][ T5146] Bluetooth: hci8: command tx timeout [ 485.153121][ T5146] Bluetooth: hci9: command tx timeout [ 485.472863][ T5146] Bluetooth: hci3: command tx timeout [ 486.034951][ T5146] Bluetooth: hci10: command tx timeout [ 486.202892][ T5146] Bluetooth: hci8: command tx timeout [ 487.214559][T14701] lo speed is unknown, defaulting to 1000 [ 487.233661][ T5146] Bluetooth: hci9: command tx timeout [ 487.365639][T14747] lo speed is unknown, defaulting to 1000 [ 487.432351][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2206'. [ 488.125888][ T5146] Bluetooth: hci10: command tx timeout [ 489.314131][ T5146] Bluetooth: hci9: command tx timeout [ 490.193992][ T5146] Bluetooth: hci10: command tx timeout [ 491.392194][ T5146] Bluetooth: hci9: command tx timeout [ 492.272982][ T5146] Bluetooth: hci10: command tx timeout [ 501.323471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.782677][T14700] lo speed is unknown, defaulting to 1000 [ 513.974142][T14748] lo speed is unknown, defaulting to 1000 [ 529.473364][T14792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.905045][T14756] lo speed is unknown, defaulting to 1000 [ 545.942467][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 546.364485][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 546.465846][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 546.814174][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 547.073819][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 547.102607][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.214758][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 547.383699][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 547.894882][ T5146] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 548.054653][T14805] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 548.285757][T14803] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 548.392366][T14803] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 548.615417][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 548.925424][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 549.384043][ T5146] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 549.583335][ T5146] Bluetooth: hci7: command 0x0406 tx timeout [ 549.714263][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 549.734213][ T5146] Bluetooth: hci6: command 0x0406 tx timeout [ 550.272937][T14806] Bluetooth: hci11: command tx timeout [ 550.703862][ T5146] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 550.803163][ T5146] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 551.152443][ T5826] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 551.165402][ T5836] Bluetooth: hci12: command tx timeout [ 551.482249][ T5823] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 551.953613][ T5823] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 552.384090][T14806] Bluetooth: hci11: command tx timeout [ 553.153913][ T5823] Bluetooth: hci13: command tx timeout [ 553.233316][ T5823] Bluetooth: hci12: command tx timeout [ 554.433141][ T5823] Bluetooth: hci11: command tx timeout [ 554.513683][ T5823] Bluetooth: hci14: command tx timeout [ 554.592446][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 555.244259][T14806] Bluetooth: hci13: command tx timeout [ 555.314733][T14806] Bluetooth: hci12: command tx timeout [ 555.373552][T14756] lo speed is unknown, defaulting to 1000 [ 555.544381][ T5823] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 555.634836][ T5823] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 555.734052][ T5823] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 556.003404][ T5823] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 556.112967][ T5823] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 556.513825][T14806] Bluetooth: hci11: command tx timeout [ 556.592718][ T5823] Bluetooth: hci14: command tx timeout [ 557.332953][ T5823] Bluetooth: hci13: command tx timeout [ 557.392774][ T5823] Bluetooth: hci12: command tx timeout [ 558.593881][ T5823] Bluetooth: hci15: command tx timeout [ 558.674643][ T5823] Bluetooth: hci14: command tx timeout [ 559.402270][ T5823] Bluetooth: hci13: command tx timeout [ 560.672274][ T5823] Bluetooth: hci15: command tx timeout [ 560.755151][ T5823] Bluetooth: hci14: command tx timeout [ 562.784007][ T5823] Bluetooth: hci15: command tx timeout [ 562.854017][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.524783][T14747] lo speed is unknown, defaulting to 1000 [ 564.545168][T14801] lo speed is unknown, defaulting to 1000 [ 564.835656][ T5823] Bluetooth: hci15: command tx timeout [ 580.425670][T12803] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 580.592799][T12803] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 584.204192][T12803] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.402536][T12803] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 592.743717][T12803] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 593.212473][T12803] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 594.763684][T12803] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 594.849588][T12803] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 600.672918][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 600.753163][ T5836] Bluetooth: hci8: command 0x0406 tx timeout [ 601.212745][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.352505][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.414497][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.835530][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.123194][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.233121][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 603.323333][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 603.463831][T14748] lo speed is unknown, defaulting to 1000 [ 603.514746][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 603.582084][T14799] lo speed is unknown, defaulting to 1000 [ 603.785622][ T5823] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 604.323416][ T5823] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 604.922002][T14806] Bluetooth: hci1: command tx timeout [ 605.124860][T14806] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 605.323592][T14806] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 605.403908][T14806] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 605.615734][T14806] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 605.794057][ T5826] Bluetooth: hci9: command 0x0406 tx timeout [ 606.064111][ T5826] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 606.765347][ T5823] Bluetooth: hci16: command tx timeout [ 606.992848][ T5823] Bluetooth: hci1: command tx timeout [ 607.935706][ T5823] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 608.002385][ T5823] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 608.144976][ T5823] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 608.484416][ T5823] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 608.615449][ T5823] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 608.753403][ T5823] Bluetooth: hci17: command tx timeout [ 608.844225][ T5836] Bluetooth: hci16: command tx timeout [ 609.082556][ T5836] Bluetooth: hci1: command tx timeout [ 610.845333][ T5836] Bluetooth: hci17: command tx timeout [ 610.913843][ T5836] Bluetooth: hci10: command 0x0406 tx timeout [ 610.933459][ T5836] Bluetooth: hci16: command tx timeout [ 611.175627][ T5836] Bluetooth: hci1: command tx timeout [ 611.393326][ T5836] Bluetooth: hci18: command tx timeout [ 612.913549][ T5826] Bluetooth: hci17: command tx timeout [ 612.994949][ T5826] Bluetooth: hci16: command tx timeout [ 613.480176][ T5826] Bluetooth: hci18: command tx timeout [ 614.993404][ T5826] Bluetooth: hci17: command tx timeout [ 615.555109][ T5826] Bluetooth: hci18: command tx timeout [ 616.243481][ T5836] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 616.344052][ T5836] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 616.432755][ T5836] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 616.783004][ T5836] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 616.972630][ T5836] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 617.643675][ T5836] Bluetooth: hci18: command tx timeout [ 619.964495][ T5826] Bluetooth: hci19: command tx timeout [ 622.034931][ T5826] Bluetooth: hci19: command tx timeout [ 624.114923][ T5826] Bluetooth: hci19: command tx timeout [ 624.213253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.192218][ T5826] Bluetooth: hci19: command tx timeout [ 641.913574][T12803] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 654.491733][T12803] bond2 (unregistering): (slave macvlan0): Releasing backup interface [ 657.504807][T12803] bond0 (unregistering): Released all slaves [ 658.194927][T12803] bond1 (unregistering): Released all slaves [ 661.343388][ T5836] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 661.432714][ T5836] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 661.545217][ T5836] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 661.933568][ T5836] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 662.513126][ T5836] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 665.065228][T12803] bond2 (unregistering): Released all slaves [ 665.082641][ T5836] Bluetooth: hci20: command tx timeout [ 665.192210][ T31] INFO: task syz-executor:14701 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 665.275264][ T31] Not tainted syzkaller #0 [ 665.415181][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 665.562762][ T31] task:syz-executor state:D stack:23616 pid:14701 tgid:14701 ppid:1 task_flags:0x400140 flags:0x00080003 [ 665.585452][T12803] bond3 (unregistering): Released all slaves [ 665.775089][ T31] Call Trace: [ 665.843323][ T31] [ 665.912213][ T31] __schedule+0x1798/0x4cc0 [ 665.992453][ T31] ? __lock_acquire+0xab9/0xd20 [ 666.072182][ T31] ? __lock_acquire+0xab9/0xd20 [ 666.253535][ T31] ? __pfx___schedule+0x10/0x10 [ 666.335580][ T5826] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 666.353521][ T31] ? schedule+0x91/0x360 [ 666.412131][ T5826] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 666.445590][ T31] schedule+0x165/0x360 [ 666.491147][ T31] schedule_preempt_disabled+0x13/0x30 [ 666.500245][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 666.522983][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 666.575025][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 666.684342][ T5826] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 666.782729][ T31] ? __lock_acquire+0xab9/0xd20 [ 666.883225][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 666.992865][ T31] down_write+0x1ab/0x1f0 [ 666.995487][ T5823] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 667.105604][T14806] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 667.123162][T14806] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 667.163818][T14806] Bluetooth: hci20: command tx timeout [ 667.242704][ T31] ? __pfx_down_write+0x10/0x10 [ 667.332914][ T5823] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 667.433823][ T5823] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 667.595262][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 667.702999][T14806] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 667.824464][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 668.072657][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 668.092546][ T5836] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 668.223210][ T31] rdma_dev_exit_net+0x8c/0x340 [ 668.242103][ T31] ? __pfx___might_resched+0x10/0x10 [ 668.444656][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 668.453120][ T31] ? net_generic+0x1e/0x240 [ 668.461432][ T31] ? mutex_is_locked+0x17/0x50 [ 668.468706][ T31] ? rtnl_is_locked+0x15/0x20 [ 668.473425][ T31] ops_undo_list+0x49a/0x990 [ 668.481102][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 668.489606][ T31] ? ops_init+0x469/0x5c0 [ 668.493982][ T31] setup_net+0x2d6/0x320 [ 668.500595][ T31] ? __pfx_setup_net+0x10/0x10 [ 668.505501][ T31] ? copy_net_ns+0x337/0x4e0 [ 668.524345][ T31] ? down_read_killable+0x1d1/0x350 [ 668.562697][ T31] ? preinit_net+0x47d/0x780 [ 668.674337][ T31] copy_net_ns+0x34e/0x4e0 [ 668.763438][ T31] create_new_namespaces+0x3f3/0x720 [ 668.822546][ T31] ? security_capable+0x7e/0x2e0 [ 668.892958][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 668.901642][ T31] ksys_unshare+0x4c8/0x8c0 [ 668.933738][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 668.944927][ T31] ? dnotify_flush+0x1db/0x5e0 [ 668.952538][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 668.961751][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 668.969054][ T31] __x64_sys_unshare+0x38/0x50 [ 668.973869][ T31] do_syscall_64+0xfa/0xfa0 [ 668.981383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.989948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.998288][ T31] ? clear_bhb_loop+0x60/0xb0 [ 669.002992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.012242][ T31] RIP: 0033:0x7fdca5390ec7 [ 669.053710][ T31] RSP: 002b:00007ffce5374608 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 669.133483][ T31] RAX: ffffffffffffffda RBX: 00007fdca55e5f40 RCX: 00007fdca5390ec7 [ 669.233461][ T5823] Bluetooth: hci20: command tx timeout [ 669.272365][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 669.312979][ T31] RBP: 00007fdca55e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 669.352127][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 669.414530][ T31] R13: 0000000000000003 R14: 00007ffce53748d8 R15: 0000000000000000 [ 669.543637][ T31] [ 669.622299][ T31] INFO: task syz-executor:14710 blocked for more than 147 seconds. [ 669.781293][ T31] Not tainted syzkaller #0 [ 669.873036][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.042458][ T31] task:syz-executor state:D stack:23584 pid:14710 tgid:14710 ppid:1 task_flags:0x400140 flags:0x00080003 [ 670.192757][ T5823] Bluetooth: hci21: command tx timeout [ 670.244453][ T31] Call Trace: [ 670.364195][ T31] [ 670.422470][ T31] __schedule+0x1798/0x4cc0 [ 670.473236][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.583190][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.743067][ T31] ? __pfx___schedule+0x10/0x10 [ 670.812703][ T31] ? schedule+0x91/0x360 [ 670.924192][T14806] Bluetooth: hci22: command tx timeout [ 670.985013][ T31] schedule+0x165/0x360 [ 671.125332][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.232566][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 671.313690][T14806] Bluetooth: hci20: command tx timeout [ 671.372087][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 671.381524][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 671.403064][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.439455][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 671.445087][ T31] down_write+0x1ab/0x1f0 [ 671.464281][ T31] ? __pfx_down_write+0x10/0x10 [ 671.492858][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 671.522245][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 671.605620][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 671.643369][ T31] rdma_dev_exit_net+0x8c/0x340 [ 671.690200][ T31] ? __pfx___might_resched+0x10/0x10 [ 671.695568][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 671.714248][ T31] ? net_generic+0x1e/0x240 [ 671.754705][ T31] ? mutex_is_locked+0x17/0x50 [ 671.822522][ T31] ? rtnl_is_locked+0x15/0x20 [ 671.892893][ T31] ops_undo_list+0x49a/0x990 [ 671.932262][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 672.013432][ T31] ? ops_init+0x469/0x5c0 [ 672.082912][ T31] setup_net+0x2d6/0x320 [ 672.165231][ T31] ? __pfx_setup_net+0x10/0x10 [ 672.252903][ T31] ? copy_net_ns+0x337/0x4e0 [ 672.273980][T14806] Bluetooth: hci21: command tx timeout [ 672.334029][ T31] ? down_read_killable+0x1d1/0x350 [ 672.352373][T14806] Bluetooth: hci11: command 0x0406 tx timeout [ 672.364719][ T5836] Bluetooth: hci12: command 0x0406 tx timeout [ 672.412302][ T31] ? preinit_net+0x47d/0x780 [ 672.464369][ T31] copy_net_ns+0x34e/0x4e0 [ 672.533825][ T31] create_new_namespaces+0x3f3/0x720 [ 672.572716][ T31] ? security_capable+0x7e/0x2e0 [ 672.605233][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 672.614640][ T31] ksys_unshare+0x4c8/0x8c0 [ 672.675546][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 672.690366][ T31] __x64_sys_unshare+0x38/0x50 [ 672.695176][ T31] do_syscall_64+0xfa/0xfa0 [ 672.783597][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.853926][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 672.983972][ T31] ? clear_bhb_loop+0x60/0xb0 [ 672.995706][ T5836] Bluetooth: hci22: command tx timeout [ 673.203415][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.342670][ T31] RIP: 0033:0x7f5fb2790ec7 [ 673.384689][ T31] RSP: 002b:00007ffc531ee0c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 673.502156][ T31] RAX: ffffffffffffffda RBX: 00007f5fb29e5f40 RCX: 00007f5fb2790ec7 [ 673.541864][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 673.632002][ T31] RBP: 00007f5fb29e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 673.765660][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 673.835582][ T31] R13: 0000000000000003 R14: 00007ffc531ee398 R15: 0000000000000000 [ 673.929968][ T31] [ 674.062111][ T31] [ 674.062111][ T31] Showing all locks held in the system: [ 674.184647][ T31] 1 lock held by khungtaskd/31: [ 674.352870][ T5836] Bluetooth: hci21: command tx timeout [ 674.480159][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 674.643490][ T31] 3 locks held by kworker/u8:5/144: [ 674.813196][ T31] 2 locks held by getty/5584: [ 675.043154][ T31] #0: ffff88814d7950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 675.092881][ T5836] Bluetooth: hci22: command tx timeout